4.6
CVE-2002-1311
- EPSS 0.34%
- Veröffentlicht 29.11.2002 05:00:00
- Zuletzt bearbeitet 16.06.2026 21:59:05
- Erkennungen
Courier sqwebmail before 0.40.0 does not quickly drop privileges after startup in certain cases, which could allow local users to read arbitrary files.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Double Precision Incorporated ≫ Courier Mta Version 0.37.3
Double Precision Incorporated ≫ Courier Mta Version 0.40
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.34% | 0.256 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 4.6 | 3.9 | 6.4 |
AV:L/AC:L/Au:N/C:P/I:P/A:P
|
http://marc.info/?l=bugtraq&m=103794021013436&w=2
http://www.debian.org/security/2002/dsa-197
http://www.iss.net/security_center/static/10643.php
http://www.securityfocus.com/bid/6189