VulnerabilityModified
CVE-2002-1311
Courier sqwebmail before 0.40.0 does not quickly drop privileges after startup in certain cases, which could allow local users to read arbitrary files.
MEDIUM 4.6EPSS 0.34%
Does this matter?
Lower severity and a low EPSS score (0.34%). Track it; it rarely justifies an emergency change on its own.
Description
Courier sqwebmail before 0.40.0 does not quickly drop privileges after startup in certain cases, which could allow local users to read arbitrary files.
- CVSS 2.0
- 4.6 MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 0.34% probability · 27th percentile
- CISA KEV
- Not listed
- Affected
- double precision incorporated/courier mta
- Source
- cve@mitre.org
References
- http://marc.info/?l=bugtraq&m=103794021013436&w=2
- http://www.debian.org/security/2002/dsa-197Patch, Vendor Advisory
- http://www.iss.net/security_center/static/10643.phpVendor Advisory
- http://www.securityfocus.com/bid/6189
- http://marc.info/?l=bugtraq&m=103794021013436&w=2
- http://www.debian.org/security/2002/dsa-197Patch, Vendor Advisory
- http://www.iss.net/security_center/static/10643.phpVendor Advisory
- http://www.securityfocus.com/bid/6189
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.