CVE-2002-0531: Emumail

Medium severity, CVSS 5.0. EPSS: 4.1% chance of exploitation in the next 30 days.

Directory traversal vulnerability in emumail.cgi in EMU Webmail 4.5.x and 5.1.0 allows remote attackers to read arbitrary files or list arbitrary directories via a .. (dot dot) in the type parameter.

Affected products

• Emumail Emumail: version 3.0 only
• Emumail Emumail Red Hat Linux: version 5.0 only; version 5.1 only
• Emumail Emumail Unix: version 5.0 only; version 5.1 only

Published 2002-08-12. Last modified 2026-06-16.