Vulnerability in Double Precision Incorporated Courier Mta
CVE-2002-1311
Courier sqwebmail before 0.40.0 does not quickly drop privileges after startup in certain cases, which could allow local users to read arbitrary files.
EPSS: 0.003 (26.6th percentile) — read the EPSS interpretation.
Affected products
- Double_precision_incorporated Courier_mta — versions 0.37.3, 0.40
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, Vendor Advisory, x_refsource_XF)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vendor-advisory, Patch, x_refsource_DEBIAN, Vendor Advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)