CVE-2003-0143

Qualcomm Qpopper - Buffer Overflow

Title source: rule

Description

The pop_msg function in qpopper 4.0.x before 4.0.5fc2 does not null terminate a message buffer after a call to Qvsnprintf, which could allow authenticated users to execute arbitrary code via a buffer overflow in a mdef command with a long macro name.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Florian Heinz · cremotelinux

https://www.exploit-db.com/exploits/22342

View Code ZIP pw:eip

References (8)

[Mailing List] http://marc.info/?l=bugtraq&m=104792541215354&w=2

[Exploit, Patch, Vendor Advisory] http://www.securityfocus.com/bid/7058

[Vendor Advisory] http://www.novell.com/linux/security/advisories/2003_018_qpopper.html

[Mailing List] http://marc.info/?l=bugtraq&m=104739841223916&w=2

[Mailing List] http://marc.info/?l=bugtraq&m=104768137314397&w=2

[Patch, Vendor Advisory] http://www.debian.org/security/2003/dsa-259

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/11516

[Mailing List] http://marc.info/?l=bugtraq&m=104748775900481&w=2

Scores

EPSS 0.0882

EPSS Percentile 92.5%

Details

Status published

Products (4)

qualcomm/qpopper 4.0.1

qualcomm/qpopper 4.0.2

qualcomm/qpopper 4.0.3

qualcomm/qpopper 4.0.4

Published Mar 18, 2003

Tracked Since Feb 18, 2026