CVE-2001-1487: Qualcomm Qpopper

Medium severity, CVSS 4.6. EPSS: 0.5% chance of exploitation in the next 30 days.

popauth utility in Qualcomm Qpopper 4.0 and earlier allows local users to overwrite arbitrary files and execute commands as the pop user via a symlink attack on the -trace file option.

Affected products

• Qualcomm Qpopper: up to and including 4.0

Published 2001-12-31. Last modified 2026-06-16.