Back to CVE Browser

CVE-2001-1046

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1850%

EPSS Percentile23.30th

PublishedJun 2, 2001

Last ModifiedApr 16, 2026

Vulnerability Description

Buffer overflow in qpopper (aka qpop or popper) 4.0 through 4.0.2 allows remote attackers to gain privileges via a long username.

Affected Platforms (CPE)

📦

Qualcomm

Qpopper

= 4.0

📦

Qualcomm

Qpopper

= 4.0.1

📦

Qualcomm

Qpopper

= 4.0.2

References & Advisories

🔗 http://archives.neohapsis.com/archives/linux/caldera/2001-q3/0006.html

🔗 http://marc.info/?l=vuln-dev&m=98777649031406&w=2

🔗 http://www.securityfocus.com/archive/1/188267

🔗 http://www.securityfocus.com/bid/2811

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/6647

🔗 http://archives.neohapsis.com/archives/linux/caldera/2001-q3/0006.html

🔗 http://marc.info/?l=vuln-dev&m=98777649031406&w=2

🔗 http://www.securityfocus.com/archive/1/188267

Related Vulnerabilities

CVE-2003-014310.0

The pop_msg function in qpopper 4.0.x before 4.0.5fc2 does not null terminate a message buffer after a call to Qvsnprintf, which c...

CVE-1999-082210.0

Buffer overflow in Qpopper (qpop) 3.0 allows remote root access via AUTH command.

CVE-1999-00069.8

Buffer overflow in POP servers based on BSD/Qualcomm's qpopper allows remote attackers to gain root access using a long PASS comma...

CVE-2000-04427.5

Qpopper 2.53 and earlier allows local users to gain privileges via a formatting string in the From: header, which is processed by ...