CVE-2002-1311: Double Precision Incorporated Courier MTA

Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days.

Courier sqwebmail before 0.40.0 does not quickly drop privileges after startup in certain cases, which could allow local users to read arbitrary files.

Affected products

• Double Precision Incorporated Courier MTA: version 0.37.3 only; version 0.40 only

Published 2002-11-29. Last modified 2026-06-16.