Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
popauth.c in qpopper 4.0.5 and earlier does not properly set the umask, which may cause qpopper to create files with group or world-writable permissions.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Qpopper多个不安全文件处理漏洞
Vulnerability Description
Qpopper是非常流行的UNIX和Linux POP3协议服务器，允许用户使用任何POP3客户端访问邮件。 Qpopper中存在多个不安全文件处理漏洞，本地攻击者可以利用这些漏洞以root用户权限覆盖任意文件，或创建新文件。 起因是在访问某些文件时没有正确的丢弃超级用户权限，Qpopper还没有正确的设置进程umask，这可能允许创建组可写或完全可写文件。
CVSS Information
N/A
Vulnerability Type
N/A