CVE-2002-1395: Debian Internet Message

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Internet Message (IM) 141-18 and earlier uses predictable file and directory names, which allows local users to (1) obtain unauthorized directory permissions via a temporary directory used by impwagent, and (2) overwrite and create arbitrary files via immknmz.

Affected products

• Debian Internet Message: version 133-0 only; version 141-0 only

Published 2003-01-17. Last modified 2026-06-16.