Qpopper
Vendor:
First CVE: Jul 14, 1998 · Active for 28 years
14
Total CVEs
More Total CVEs than 92% of tracked products
2.0
Avg CVEs / Year
Higher CVE frequency than 63% of tracked products
6.6
Avg CVSS
Higher Avg CVSS than 36% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Qpopper over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jul 14, 1998
28 years ago
Most Recent CVE
Sep 28, 2005
7,608 days ago
CVE Severity & Scoring
Qpopper14 CVEs
50%
36%
All CVEs353,173 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local1 (7.1%)
Network1 (7.1%)
Unknown12 (85.7%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low2 (14.3%)
High0 (0.0%)
Unknown12 (85.7%)
User Interaction
None2 (14.3%)
Unknown12 (85.7%)
Required0 (0.0%)
Privileges Required
Low1 (7.1%)
High0 (0.0%)
None1 (7.1%)
Unknown12 (85.7%)
Top CVEs
Signals from CVEs in this product scope (14 CVEs).
14 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-1999-0006CRITICAL Buffer overflow in POP servers based on BSD/Qualcomm's qpopper allows remote attackers to gain root access using a long PASS command. | Jul 14, 1998 | 9.8 | 47 | NO | YES |
CVE-2003-0143HIGH The pop_msg function in qpopper 4.0.x before 4.0.5fc2 does not null terminate a message buffer after a call to Qvsnprintf, which could allow authenticated users to execute arbitrar | Mar 18, 2003 | 10.0 | 42 | NO | YES |
CVE-1999-0822HIGH Buffer overflow in Qpopper (qpop) 3.0 allows remote root access via AUTH command. | Nov 30, 1999 | 10.0 | 36 | NO | YES |
CVE-2000-0442HIGH Qpopper 2.53 and earlier allows local users to gain privileges via a formatting string in the From: header, which is processed by the euidl command. | May 24, 2000 | 7.5 | 29 | NO | YES |
CVE-2000-0096HIGH Buffer overflow in qpopper 3.0 beta versions allows local users to gain privileges via a long LIST command. | Jan 26, 2000 | 7.2 | 27 | NO | YES |
CVE-2001-1046HIGH Buffer overflow in qpopper (aka qpop or popper) 4.0 through 4.0.2 allows remote attackers to gain privileges via a long username. | Jun 2, 2001 | 10.0 | 25 | NO | NO |
CVE-2002-0454MEDIUM Qpopper (aka in.qpopper or popper) 4.0.3 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a very large string, which causes an infinite loop. | Aug 12, 2002 | 5.0 | 24 | NO | YES |
CVE-2000-1198MEDIUM qpopper POP server creates lock files with predictable names, which allows local users to cause a denial of service for other users (lack of mail access) by creating lock files for | Aug 31, 2001 | 5.5 | 23 | NO | YES |
CVE-2005-3098MEDIUM poppassd in Qualcomm qpopper 4.0.8 allows local users to modify arbitrary files and gain privileges via the -t (trace file) command line argument. | Sep 28, 2005 | 4.6 | 21 | NO | YES |
CVE-2001-1487MEDIUM popauth utility in Qualcomm Qpopper 4.0 and earlier allows local users to overwrite arbitrary files and execute commands as the pop user via a symlink attack on the -trace file opt | Dec 31, 2001 | 4.6 | 21 | NO | YES |
Exploit Exposure
Signals from CVEs in this product scope (14 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
10 CVEs
71.4% of CVEs· 91st percentile
Social Chatter
Signals from CVEs in this product scope (14 CVEs).
Media Mentions
Signals from CVEs in this product scope (14 CVEs).
Top CNAs Publishing CVEs For Qpopper
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 4.0_b14 | 1 | 3.6 | 0.5% | 0 | 1 |
| 4.0.8 | 1 | 4.6 | 0.6% | 0 | 1 |
| 4.0.5_fc2 | 1 | 3.6 | 0.5% | 0 | 1 |
| 4.0.5 | 1 | 3.6 | 0.5% | 0 | 1 |
| 4.0.4 | 3 | 6.1 | 3.1% | 0 | 2 |
| 4.0.3 | 4 | 5.8 | 3.6% | 0 | 3 |
| 4.0.2 | 4 | 7.2 | 4.0% | 0 | 3 |
| 4.0.1 | 5 | 6.7 | 3.5% | 0 | 3 |
| 4.0 | 3 | 6.2 | 2.5% | 0 | 2 |
| 3.0beta9 | 1 | 7.2 | 0.5% | 0 | 1 |
| 3.0beta8 | 1 | 7.2 | 0.5% | 0 | 1 |
| 3.0beta7 | 1 | 7.2 | 0.5% | 0 | 1 |
| 3.0beta6 | 1 | 7.2 | 0.5% | 0 | 1 |
| 3.0beta5 | 1 | 7.2 | 0.5% | 0 | 1 |
| 3.0beta4 | 1 | 7.2 | 0.5% | 0 | 1 |
| 3.0beta3 | 1 | 7.2 | 0.5% | 0 | 1 |
| 3.0beta29 | 1 | 7.2 | 0.5% | 0 | 1 |
| 3.0beta28 | 1 | 7.2 | 0.5% | 0 | 1 |
| 3.0beta27 | 1 | 7.2 | 0.5% | 0 | 1 |
| 3.0beta26 | 1 | 7.2 | 0.5% | 0 | 1 |