CVE-1999-0822: Buffer overflow in Qpopper (qpop) 3.0 allows remote root access via AUTH command.

Security readout for executives and security teams

CVE-1999-0822 is a reported buffer overflow in Qpopper qpop 3.0. A remote attacker could trigger it through the AUTH command and gain root access. The business risk is severe where this old POP mail service is still deployed, but the provided sources do not show current active exploitation or a named patch. Exposure is most likely in legacy environments still running Qpopper qpop 3.0, especially if the POP service is reachable from untrusted networks. The provided affected-product metadata is incomplete and lists vendor/product as n/a. Treat this as urgent if Qpopper 3.0 exists in the environment, because the stated outcome is remote root access. If the product is absent, document non-exposure and keep legacy mail-service inventory current. Mitigation focus: Identify any systems running Qpopper or qpop 3.0.; Check vendor or maintainer guidance for fixed versions or supported replacements.; Remove or replace obsolete Qpopper deployments where feasible..

Prepared

Jul 12, 2026, 06:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.