popauth utility in Qualcomm Qpopper 4.0 and earlier allows local users to overwrite arbitrary files and execute commands as the pop user via a symlink attack on the -trace file option.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|
| Qpopper | Qualcomm | * | 4.0 (including) |
References
