According to its banner, the remote host is running a version of the Qpopper POP3 server that suffers from two local, insecure file handling vulnerabilities.  First, it fails to properly drop root privileges when processing certain local files, which could lead to overwriting or creation of arbitrary files as root.  And second, it fails to set the process umask, potentially allowing creation of group- or world-writable files.

バナーによると、リモートホストが実行しているQpopper POP3サーバーのバージョンは、2つのローカルの安全でないファイル処理の脆弱性の影響を受けます。1つ目は、特定のローカルファイルを処理する際に、root権限を適切に落とせないことです。これにより、任意のファイルがrootとして上書きまたは作成される可能性があります。2番目に、プロセスumaskの設定に失敗し、グループまたは誰でも書き込めるファイルが作成される可能性があります。

根據標題來判斷，遠端主機正在執行的 Qpopper POP3 伺服器版本受到兩個本機不安全的檔案處理弱點影響。首先，它在處理某些本機檔案時無法正確放置 Root 權限，這可導致攻擊者以 Root 權限覆寫或建立任意檔案。其次，它無法設定處理程序 umask，這可能允許攻擊者建立群組或任何人皆可寫入的檔案。

Jens Steube reports that qpopper is vulnerable to a privilege escalation vulnerability. qpopper does not properly drop root privileges so that user-supplied configuration and trace files can be processed with root privileges. This could allow a local attacker to create or modify arbitrary files.

qpopper is also affected by improper umask settings which could allow users to create group or world-writeable files, possibly allowing an attacker to overwrite arbitrary files.

Qpopper was handling user files while running as root. Qpopper could also be tricked into overwriting system files. CVE-2005-1151 and CVE-2005-1152 have been assigned to these issues.

このアドバイザリは、安定版（stable）amd64 ディストリビューションのセキュリティサポートを追加します。
sarge リリース以降のすべてのセキュリティ更新がカバーされます。これには、まだ正式ではない amd64 ポートに対する更新済みパッケージがありませんでした。今後のセキュリティアドバイザリには、このポートの更新も含まれる予定です。

此公告添加了对稳定 amd64 发行版本的安全支持。
它涵盖自 sarge 发布以来的所有安全更新，该版本缺少针对尚不是官方 amd64 端口的更新后的程序包。未来的安全公告将也包含此端口的更新。

此公告會新增對穩定之 amd64 發行版本的安全性支援。
其中包含自 sarge 發佈以來的所有安全性更新，但缺少非官方 amd64 連接埠的更新版套件。之後的安全性公告也將包含此連接埠的更新。

The remote host is affected by the vulnerability described in GLSA-200505-17 (Qpopper: Multiple Vulnerabilities)

    Jens Steube discovered that Qpopper doesn't drop privileges to     process local files from normal users (CAN-2005-1151). The upstream     developers discovered that Qpopper can be forced to create group or     world writeable files (CAN-2005-1152).
  Impact :

    A malicious local attacker could exploit Qpopper to overwrite     arbitrary files as root or create new files which are group or world     writeable.
  Workaround :

    There is no known workaround at this time.

This advisory does only cover updated packages for Debian 3.0 alias woody. For reference below is the original advisory text :

  Two bugs have been discovered in qpopper, an enhanced Post Office   Protocol (POP3) server. The Common Vulnerabilities and Exposures   project identifies the following problems :

    - CAN-2005-1151       Jens Steube discovered that while processing local       files owned or provided by a normal user privileges       weren't dropped, which could lead to the overwriting       or creation of arbitrary files as root.

    - CAN-2005-1152

      The upstream developers noticed that qpopper could be       tricked to creating group- or world-writable files.

This advisory adds security support for the stable amd64 distribution.
It covers all security updates since the release of sarge, which were missing updated packages for the not yet official amd64 port. Future security advisories will include updates for this port as well.

The remote host is running Qpopper, a POP3 mail server for Unix-type systems.
This version of Qpopper is vulnerable to multiple local configuration flaws.
A local attacker exploiting these flaws would be able to elevate privileges
on the Qpopper system.

ID	名稱	產品	系列	已發布	已更新	嚴重性
18361	Qpopper < 4.0.6 Multiple Insecure File Handling Local Privilege Escalation	Nessus	Misc.	2005/5/24	2018/11/15	high
18361	Qpopper < 4.0.6ローカルの権限昇格を処理する複数の安全でないファイル	Nessus	Misc.	2005/5/24	2018/11/15	high
18361	Qpopper < 4.0.6 多個不安全檔案處理本機權限提升弱點	Nessus	Misc.	2005/5/24	2018/11/15	high
21530	FreeBSD : qpopper -- multiple privilege escalation vulnerabilities (eb29a575-3381-11da-8340-000e0c2e438a)	Nessus	FreeBSD Local Security Checks	2006/5/13	2021/1/6	high
41072	SuSE9 Security Update : qpopper (YOU Patch Number 10045)	Nessus	SuSE Local Security Checks	2009/9/24	2021/1/14	high
57528	Debian DSA-773-1：amd64 - いくつかの脆弱性	Nessus	Debian Local Security Checks	2012/1/12	2021/1/4	critical
57528	Debian DSA-773-1：amd64 - 多个漏洞	Nessus	Debian Local Security Checks	2012/1/12	2021/1/4	critical
57528	Debian DSA-773-1 : amd64 - 數個弱點	Nessus	Debian Local Security Checks	2012/1/12	2021/1/4	critical
18381	GLSA-200505-17 : Qpopper: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	2005/5/28	2021/1/6	high
18515	Debian DSA-728-2 : qpopper - missing privilege release	Nessus	Debian Local Security Checks	2005/6/17	2021/1/4	high
57528	Debian DSA-773-1 : amd64 - several vulnerabilities	Nessus	Debian Local Security Checks	2012/1/12	2021/1/4	critical
2935	Qualcomm Qpopper < 4.0.5 Multiple Local Privilege Escalation	Nessus Network Monitor	POP Server	2005/5/23	2019/3/6	high

偵測

搜尋 Plugin

high

high

high

high

high

critical

critical

critical

high

high

critical

high