Denial of Service Vulnerability in qpopper Mail Server by Qualcomm
CVE-2000-1198

5.5MEDIUM

Key Information:

Vendor
Qualcomm
Status
Vendor
CVE Published:
31 August 2001

Summary

The qpopper POP server contains a vulnerability that allows local users to create lock files with predictable names, leading to a denial of service for other users. By generating these files, an attacker can prevent legitimate users from accessing their email accounts, effectively disrupting mail services. This issue underscores the importance of secure file handling and user access controls within mail server applications.

References

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.