medium4.6
CVE-2002-1311
Courier sqwebmail before 0.40.0 does not quickly drop privileges after startup in certain cases, which could allow local users to read arbitrary files.
Impact
Courier sqwebmail before 0.40.0 does not quickly drop privileges after startup in certain cases, which could allow local users to read arbitrary files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Double Precision Incorporated | Courier Mta | Versions 0.37.3, 0.40 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=103794021013436&w=2
- http://www.debian.org/security/2002/dsa-197
- http://www.iss.net/security_center/static/10643.php
- http://www.securityfocus.com/bid/6189
- http://marc.info/?l=bugtraq&m=103794021013436&w=2
- http://www.debian.org/security/2002/dsa-197
- http://www.iss.net/security_center/static/10643.php
- http://www.securityfocus.com/bid/6189