CVE-2001-1487

published 2001-12-31

CVE-2001-1487: popauth utility in Qualcomm Qpopper 4.0 and earlier allows local users to overwrite arbitrary files and execute commands as the pop user via a symlink attack…

Priority P4 16 medium 4.6 CVSS 2.0

AV L AC L Au N C P I P A P

EXPLOIT

popauth utility in Qualcomm Qpopper 4.0 and earlier allows local users to overwrite arbitrary files and execute commands as the pop user via a symlink attack on the -trace file option.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
qualcomm	qpopper	<= 4.0	—

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.