CVE-2002-1311

CVE-2002-1311 describes a privilege escalation vulnerability in Courier sqwebmail versions prior to 0.40.0, specifically affecting double_precision_incorporated courier_mta. The flaw stems from the application's failure to promptly drop privileges after startup in certain scenarios. This oversight could enable local attackers to read arbitrary files on the system. The vulnerability has a CVSS score of 4.6, indicating a medium severity. It requires local access (AV:L), has low attack complexity (AC:L), and does not require authentication (Au:N). The potential impact includes confidentiality, integrity, and availability compromises (C:P/I:P/A:P). There is no evidence of active exploitation, nor are there known exploits available in Metasploit, Nuclei, or ExploitDB. The vulnerability has received minimal community attention, with no social media mentions or media coverage.