CVE-2005-1152: Debian Qpopper

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

popauth.c in qpopper 4.0.5 and earlier does not properly set the umask, which may cause qpopper to create files with group or world-writable permissions.

Affected products

• Debian Qpopper: up to and including 4.0.4; version 4.0.5 only

Published 2005-05-25. Last modified 2026-06-16.