Vulnerability Details CVE-2003-1452
Untrusted search path vulnerability in Qualcomm qpopper 4.0 through 4.05 allows local users to execute arbitrary code by modifying the PATH environment variable to reference a malicious smbpasswd program.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 36.6%
CVSS Severity
CVSS v2 Score 3.6
References
- http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0047.html
- http://securityreason.com/securityalert/3268
- http://www.securityfocus.com/archive/1/319811
- http://www.securityfocus.com/bid/7447
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11877
- http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0047.html
- http://securityreason.com/securityalert/3268
- http://www.securityfocus.com/archive/1/319811
- http://www.securityfocus.com/bid/7447
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11877
Products affected by CVE-2003-1452
-
cpe:2.3:a:qualcomm:qpopper:4.0
-
cpe:2.3:a:qualcomm:qpopper:4.0.1
-
cpe:2.3:a:qualcomm:qpopper:4.0.2
-
cpe:2.3:a:qualcomm:qpopper:4.0.3
-
cpe:2.3:a:qualcomm:qpopper:4.0.4
-
cpe:2.3:a:qualcomm:qpopper:4.0.5
-
cpe:2.3:a:qualcomm:qpopper:4.0.5_fc2
-
cpe:2.3:a:qualcomm:qpopper:4.0_b14