CVE-2005-3098: qualcomm qpopper

EPSS trend

Probability

0.58%

Chance of exploitation in the next 30 days

Percentile

46%

Versus all other CVEs

30-day change

0.00 pp

From 0.58% on 19-09-2026

19-09-202619-10-2026

EPSS score

0.58%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

4 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
referenceUnverified
Exploit Reference (seclists.org)
Maturity: unknown
exploit-databaselocalbsdVerified
Qpopper 4.0.8 (FreeBSD) - Local Privilege Escalation
Maturity: weaponized

Show all 4 exploits

exploit-databaselocallinuxVerified
Qpopper 4.0.8 (Linux) - 'poppassd' Local Privilege Escalation
Maturity: weaponized

References

4 links

www.securityfocus.com/bid/14944VDB EntryX Refsource BIDExploit
secunia.com/advisories/16935Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.vupen.com/english/advisories/2005/1844VDB EntryX Refsource VUPEN
seclists.org/lists/fulldisclosure/2005/Sep/0652.htmlMailing ListX Refsource FULLDISCExploitVendor Advisory

Related vulnerabilities

CVE-2003-1452qualcommqpopper0.52%19y ago23-10-2007 01:00Untrusted search path vulnerability in Qualcomm qpopper 4.0 through 4.05 allows local users to execute arbitrary code by modifying the PATH environment variable to reference a malicious smbpasswd program.CVE-2003-0143debianqpopper+18.60%22y ago01-09-2004 04:00The pop_msg function in qpopper 4.0.x before 4.0.5fc2 does not null terminate a message buffer after a call to Qvsnprintf, which could allow authenticated users to execute arbitrary code via a buffer overflow in a mdef command with a long macro name.CVE-2001-1487qualcommqpopper0.52%21y ago21-06-2005 04:00popauth utility in Qualcomm Qpopper 4.0 and earlier allows local users to overwrite arbitrary files and execute commands as the pop user via a symlink attack on the -trace file option.CVE-2001-1046qualcommqpopper1.91%24y ago25-06-2002 04:00Buffer overflow in qpopper (aka qpop or popper) 4.0 through 4.0.2 allows remote attackers to gain privileges via a long username.CVE-2001-1068qualcommqpopper1.11%24y ago02-02-2002 05:00qpopper 4.01 with PAM based authentication on Red Hat systems generates different error messages when an invalid username is provided instead of a valid name, which allows remote attackers to determine valid usernames on the system.CVE-2000-1198qualcommqpopper0.35%25y ago12-09-2001 04:00qpopper POP server creates lock files with predictable names, which allows local users to cause a denial of service for other users (lack of mail access) by creating lock files for other mail boxes.

All vulnerabilities inqpopper

CVE-2005-3098: qualcomm qpopper

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References