CVE-2003-1452: Untrusted search path vulnerability in Qualcomm qpopper 4.0 through 4.05 allows local users to execute arbi...

Security readout for executives and security teams

This is an old local privilege-risk issue in Qualcomm qpopper 4.0 through 4.05. A user already on the mail server could influence how poppassd finds a helper program and cause attacker-controlled code to run. It matters mainly for legacy systems still running qpopper. Exposure is likely limited to legacy mail hosts running Qualcomm qpopper 4.0 through 4.05, especially where poppassd is enabled and local user access exists. Modern environments are unlikely to be affected unless old POP mail infrastructure remains in service. Medium to high for organizations with legacy POP mail servers. It is not internet-scale remote compromise from the provided evidence, but affected systems may allow local privilege escalation on security-sensitive mail infrastructure. Mitigation focus: Inventory mail servers for Qualcomm qpopper 4.0 through 4.05.; Check vendor or distribution guidance for supported fixed versions or retirement advice.; Disable or remove poppassd where password-changing service is not required..

Prepared

Jun 29, 2026, 02:08 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.