popauth utility in Qualcomm Qpopper 4.0 and earlier allows local users to overwrite arbitrary files and execute commands as the pop user via a symlink attack on the -trace file option.
Affected Software
| Name |
Vendor |
Start Version |
End Version |
| Qpopper |
Qualcomm |
* |
4.0 (including) |
References