CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2003-0040
https://notcve.org/view.php?id=CVE-2003-0040
SQL injection vulnerability in the PostgreSQL auth module for courier 0.40 and earlier allows remote attackers to execute SQL code via the user name. Vulnerabilidad de inyección de SQL en módulo auth de PostgreSQL en courier 0.40 y anteriores permite a atacantes remotos ejecutar código SQL mediante el nombre de usuario. • http://www.debian.org/security/2003/dsa-247 http://www.securityfocus.com/bid/6738 https://exchange.xforce.ibmcloud.com/vulnerabilities/11213 •
CVSS: 4.6EPSS: 0%CPEs: 2EXPL: 0CVE-2002-1311
https://notcve.org/view.php?id=CVE-2002-1311
Courier sqwebmail before 0.40.0 does not quickly drop privileges after startup in certain cases, which could allow local users to read arbitrary files. Courier sqwebmail antes de 0.40.0 no deja privilegios rápidamente despues del inicio, lo que podría permitir a usuarios locales leer ficheros arbitrarios. • http://marc.info/?l=bugtraq&m=103794021013436&w=2 http://www.debian.org/security/2002/dsa-197 http://www.iss.net/security_center/static/10643.php http://www.securityfocus.com/bid/6189 •
CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 0CVE-2002-0914
https://notcve.org/view.php?id=CVE-2002-0914
Double Precision Courier e-mail MTA allows remote attackers to cause a denial of service (CPU consumption) via a message with an extremely large or negative value for the year, which causes a tight loop. • http://sourceforge.net/project/shownotes.php?release_id=93065 http://www.iss.net/security_center/static/9228.php http://www.osvdb.org/5052 http://www.securityfocus.com/bid/4908 •