Qpopper 2.53 and earlier allows local users to gain privileges via a formatting string in the From: header, which is processed by the euidl command.
| Software | From | Fixed in |
|---|---|---|
| qualcomm / qpopper | 2.53 | 2.53.x |
| sun / cobalt_raq_3i | - | - |
| sun / cobalt_raq_2 | - | - |
| qualcomm / qpopper | 2.52 | 2.52.x |