CVE-2002-1395

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2003-01-17 · updated 2026-06-16

Description

Internet Message (IM) 141-18 and earlier uses predictable file and directory names, which allows local users to (1) obtain unauthorized directory permissions via a temporary directory used by impwagent, and (2) overwrite and create arbitrary files via immknmz.

Affected products

Debian Internet Message: 133-0, 141-0

References

http://secunia.com/advisories/8166
http://secunia.com/advisories/8242
http://www.debian.org/security/2002/dsa-202
http://www.iss.net/security_center/static/10766.php
http://www.iss.net/security_center/static/10767.php
http://www.redhat.com/support/errata/RHSA-2003-039.html
http://www.securityfocus.com/bid/6307
http://secunia.com/advisories/8166
http://secunia.com/advisories/8242
http://www.debian.org/security/2002/dsa-202
http://www.iss.net/security_center/static/10766.php
http://www.iss.net/security_center/static/10767.php

Get alerted when CVE-2002-1395 or the next vulnerability affects your stack