CVE-2002-1581: Debian Linux

Medium severity, CVSS 5.0. EPSS: 7.6% chance of exploitation in the next 30 days.

Directory traversal vulnerability in nph-mr.cgi in Mailreader.com 2.3.20 through 2.3.31 allows remote attackers to view arbitrary files via .. (dot dot) sequences and a null byte (%00) in the configLanguage parameter.

Affected products

• Debian Debian Linux: version 3.0 only
• Mailreader.com Mailreader.com: version 2.3.20 only; version 2.3.21 only; version 2.3.22 only; version 2.3.23 only; version 2.3.24 only; version 2.3.25 only; …

Published 2004-12-06. Last modified 2026-06-16.