POP3: Qpopper AUTH Overflow (qpop3b.c)
This signature detects attempts to exploit a boundary checking vulnerability in Qualcomm qpopper daemon. Versions 3.0 and higher are susceptible. A successful attack could cause a denial of service, or allow the attacker to execute arbitrary commands on a system with the privileges of the account running the qpop POP3 server.
Extended Description
There is a buffer overflow vulnerability present in current (3.x) versions of Qualcomm popper daemon. These vulnerabilities are remotely exploitable and since the daemon runs as root, the host running qpopper can be completely compromised anonymously. The problem is in pop_msg.c, around line 68 and is the result of vsprintf() or sprintf() calls without bounds checking.
Affected Products
Qualcomm qpopper
Short Name
POP3:OVERFLOW:QPOP-OF4
Severity
Critical
Recommended
False
Recommended Action
Drop
Category
POP3
Keywords
(qpop3b.c) AUTH CVE-1999-0822 Overflow Qpopper bid:830
Release Date
04/22/2003
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3336
False Positive
Unknown
Vendors
Qualcomm
CVSS Score
10.0