← Vulnerability feed

Vulnerability record · CVE-2002-1311 · published 29 November 2002

CVE-2002-1311: Double precision incorporated courier mta vulnerability

DDouble Precision Incorporated · Courier Mta

Courier sqwebmail before 0.40.0 does not quickly drop privileges after startup in certain cases, which could allow local users to read arbitrary files.

4.6 CVSS 2.0 Medium EPSS 0.34% · top 75.1%
4.6CVSS 2.0 base score
0.34%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
8References
16 Jun 2026Last modified by NVD

Description

Courier sqwebmail before 0.40.0 does not quickly drop privileges after startup in certain cases, which could allow local users to read arbitrary files.

AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://marc.info/?l=bugtraq&m=103794021013436&w=2
http://www.debian.org/security/2002/dsa-197 PatchVendor Advisory
http://www.iss.net/security_center/static/10643.php Vendor Advisory
http://www.securityfocus.com/bid/6189
http://marc.info/?l=bugtraq&m=103794021013436&w=2
http://www.debian.org/security/2002/dsa-197 PatchVendor Advisory
http://www.iss.net/security_center/static/10643.php Vendor Advisory
http://www.securityfocus.com/bid/6189

Track CVE-2002-1311 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2006-2659Double precision incorporated courier mta vulnerabilitylibs/comverp.c in Courier MTA before 0.53.2 allows attackers to cause a denial of service (CPU consumption) via unknown vectors involving usernames t…EPSS 2.4%7.5CVE-2004-0224Double precision incorporated courier mta vulnerabilityMultiple buffer overflows in (1) iso2022jp.c or (2) shiftjis.c for Courier-IMAP before 3.0.0, Courier before 0.45, and SqWebMail before 4.0.0 may all…EPSS 3.3%7.5CVE-2003-0040Double precision incorporated courier mta vulnerabilitySQL injection vulnerability in the PostgreSQL auth module for courier 0.40 and earlier allows remote attackers to execute SQL code via the user name.EPSS 1.2%5.0CVE-2002-0914Double precision incorporated courier mta vulnerabilityDouble Precision Courier e-mail MTA allows remote attackers to cause a denial of service (CPU consumption) via a message with an extremely large or n…EPSS 1.7%

Source: NIST National Vulnerability Database (record CVE-2002-1311), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.