What’s Vulnerable › Vulnerabilities

CVE-2002-1311

• Severity: medium (CVSS 4.6 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2002-11-29 · updated 2026-06-16

Description

Courier sqwebmail before 0.40.0 does not quickly drop privileges after startup in certain cases, which could allow local users to read arbitrary files.

Affected products

• Double Precision Incorporated Courier Mta: 0.37.3, 0.40

References

• http://marc.info/?l=bugtraq&m=103794021013436&w=2
• http://www.debian.org/security/2002/dsa-197
• http://www.iss.net/security_center/static/10643.php
• http://www.securityfocus.com/bid/6189
• http://marc.info/?l=bugtraq&m=103794021013436&w=2
• http://www.debian.org/security/2002/dsa-197
• http://www.iss.net/security_center/static/10643.php
• http://www.securityfocus.com/bid/6189

Get alerted when CVE-2002-1311 or the next vulnerability affects your stack