Description
Qpopper 2.53 and 3.0 does not properly identify the \n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 1023 characters long and ends in \n.
References
- 20000421 unsafe fgets() in qpopper mailing-list
- 1133 vdb-entry