CVE:CVE-2003-1452
CNNVD:CNNVD-200312-445
Qualcomm qpopper 4.0至4.05版本存在不可信搜索路径漏洞。本地用户可以通过修改PATH环境变量引用恶意smbpasswd程序执行任意代码。
solution:Upgrade qualcomm qpopper to a higher version than 4.0,4.0.1,4.0.2,4.0.3,4.0.4,4.0.5,4.0.5_fc2,4.0_b14,and avoid the version 4.0,4.0.1,4.0.2,4.0.3,4.0.4,4.0.5,4.0.5_fc2,4.0_b14