Exploitation Summary
EIP tracks 1 public exploit for CVE-2001-1487. PoCs published by IhaQueR.
AI-analyzed exploit summary This exploit leverages a symlink vulnerability in Qpopper's popauth utility (CVE-2001-1487) to create a SUID shell for privilege escalation. It abuses the trace option to follow a malicious symlink and execute arbitrary commands, ultimately granting the attacker elevated privileges.
Description
popauth utility in Qualcomm Qpopper 4.0 and earlier allows local users to overwrite arbitrary files and execute commands as the pop user via a symlink attack on the -trace file option.
Exploits (1)
This exploit leverages a symlink vulnerability in Qpopper's popauth utility (CVE-2001-1487) to create a SUID shell for privilege escalation. It abuses the trace option to follow a malicious symlink and execute arbitrary commands, ultimately granting the attacker elevated privileges.