CVE-2001-1487

CVE-2001-1487 describes a local privilege escalation vulnerability in Qualcomm Qpopper 4.0 and earlier. An attacker can exploit a symlink attack on the popauth utility's -trace file option to overwrite arbitrary files and execute commands as the pop user. This vulnerability has a CVSS score of 4.6 (Medium) with low attack complexity, requiring local access to achieve partial confidentiality, integrity, and availability impacts. While not listed on the KEV catalog or Hot List, an ExploitDB entry exists, and there is no evidence of active exploitation or significant community discussion.