Vulnerabilities > CVE-2001-1068 - Unspecified vulnerability in Qualcomm Qpopper 4.0.1

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
qualcomm

Summary

qpopper 4.01 with PAM based authentication on Red Hat systems generates different error messages when an invalid username is provided instead of a valid name, which allows remote attackers to determine valid usernames on the system.

Vulnerable Configurations

Part Description Count
Application
Qualcomm
1