Gentoo: GLSA-200505-17 Normal: Qpopper File Overwrite Threat

Gentoo Linux Security Advisory GLSA 200505-17 https://security.gentoo.org/ Severity: Normal Title: Qpopper: Multiple Vulnerabilities Date: May 23, 2005 Bugs: #90622 ID: 200505-17

Synopsis ======= Qpopper contains two vulnerabilities allowing an attacker to overwrite arbitrary files and create files with insecure permissions.
Background ========= Qpopper is a widely used server for the POP3 protocol.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-mail/qpopper < 4.0.5-r3 >= 4.0.5-r3
========== Jens Steube discovered that Qpopper doesn't drop privileges to process local files from normal users (CAN-2005-1151). The upstream developersdiscovered that Qp...