CVE-2002-0532: Emumail

High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days.

EMU Webmail allows local users to execute arbitrary programs via a .. (dot dot) in the HTTP Host header that points to a Trojan horse configuration file that contains a pageroot specifier that contains shell metacharacters.

Affected products

• Emumail Emumail: version 3.0 only
• Emumail Emumail Red Hat Linux: version 5.0 only; version 5.1 only
• Emumail Emumail Unix: version 5.0 only; version 5.1 only

Published 2002-08-12. Last modified 2026-06-16.