Unscored severity · published Nov 29, 2002
CVE-2002-1311
Courier sqwebmail before 0.40.0 does not quickly drop privileges after startup in certain cases, which could allow local users to read arbitrary files
–
CVSS
0.3%
EPSS
No
On KEV
Description
Courier sqwebmail before 0.40.0 does not quickly drop privileges after startup in certain cases, which could allow local users to read arbitrary files.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 27% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CM
Courier Mta · Double Precision Incorporated
0.37.3; 0.40 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-1311
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-1311
marc.info
http://marc.info/?l=bugtraq&m=103794021013436&w=2
Patch
http://www.debian.org/security/2002/dsa-197
Vendor Advisory
http://www.iss.net/security_center/static/10643.php
www.securityfocus.com
http://www.securityfocus.com/bid/6189
More from Courier Mta
–
CVE-2006-2659
libs/comverp.c in Courier MTA before 0.53.2 allows attackers to cause a denial of service (CPU consumption) via unknown vectors involving usernames that contain the "=" (equals)…
–
CVE-2004-0224
Multiple buffer overflows in (1) iso2022jp.c or (2) shiftjis.c for Courier-IMAP before 3.0.0, Courier before 0.45, and SqWebMail before 4.0.0 may allow remote attackers to execute…
–
CVE-2003-0040
SQL injection vulnerability in the PostgreSQL auth module for courier 0.40 and earlier allows remote attackers to execute SQL code via the user name
–
CVE-2002-0914
Double Precision Courier e-mail MTA allows remote attackers to cause a denial of service (CPU consumption) via a message with an extremely large or negative value for the year,…