CVE-2002-1193: Tkmail

Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days.

tkmail before 4.0beta9-8.1 allows local users to create or overwrite files as users via a symlink attack on temporary files.

Affected products

• Tkmail Tkmail: version 4.0_beta1 only; version 4.0_beta4 only; version 4.0_beta6 only; version 4.0_beta8 only; version 4.0_beta9 only

Published 2002-10-28. Last modified 2026-06-16.