Unrated severityNVD Advisory· Published Aug 12, 2002· Updated Apr 16, 2026
CVE-2002-0417
CVE-2002-0417
Description
Directory traversal vulnerability in Endymion MailMan before 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) and a null character in the ALTERNATE_TEMPLATES parameter for various mmstdo*.cgi programs.
Affected products
31cpe:2.3:a:endymion:mailman_webmail:3.0:*:*:*:*:*:*:*+ 30 more
- cpe:2.3:a:endymion:mailman_webmail:3.0:*:*:*:*:*:*:*
- cpe:2.3:a:endymion:mailman_webmail:3.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:endymion:mailman_webmail:3.0.10:*:*:*:*:*:*:*
- cpe:2.3:a:endymion:mailman_webmail:3.0.11:*:*:*:*:*:*:*
- cpe:2.3:a:endymion:mailman_webmail:3.0.12:*:*:*:*:*:*:*
- cpe:2.3:a:endymion:mailman_webmail:3.0.13:*:*:*:*:*:*:*
- cpe:2.3:a:endymion:mailman_webmail:3.0.14:*:*:*:*:*:*:*
- cpe:2.3:a:endymion:mailman_webmail:3.0.15:*:*:*:*:*:*:*
- cpe:2.3:a:endymion:mailman_webmail:3.0.16:*:*:*:*:*:*:*
- cpe:2.3:a:endymion:mailman_webmail:3.0.18:*:*:*:*:*:*:*
- cpe:2.3:a:endymion:mailman_webmail:3.0.19:*:*:*:*:*:*:*
- cpe:2.3:a:endymion:mailman_webmail:3.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:endymion:mailman_webmail:3.0.20:*:*:*:*:*:*:*
- cpe:2.3:a:endymion:mailman_webmail:3.0.21:*:*:*:*:*:*:*
- cpe:2.3:a:endymion:mailman_webmail:3.0.22:*:*:*:*:*:*:*
- cpe:2.3:a:endymion:mailman_webmail:3.0.23:*:*:*:*:*:*:*
- cpe:2.3:a:endymion:mailman_webmail:3.0.24:*:*:*:*:*:*:*
- cpe:2.3:a:endymion:mailman_webmail:3.0.26:*:*:*:*:*:*:*
- cpe:2.3:a:endymion:mailman_webmail:3.0.27:*:*:*:*:*:*:*
- cpe:2.3:a:endymion:mailman_webmail:3.0.28:*:*:*:*:*:*:*
- cpe:2.3:a:endymion:mailman_webmail:3.0.29:*:*:*:*:*:*:*
- cpe:2.3:a:endymion:mailman_webmail:3.0.30:*:*:*:*:*:*:*
- cpe:2.3:a:endymion:mailman_webmail:3.0.31:*:*:*:*:*:*:*
- cpe:2.3:a:endymion:mailman_webmail:3.0.32:*:*:*:*:*:*:*
- cpe:2.3:a:endymion:mailman_webmail:3.0.33:*:*:*:*:*:*:*
- cpe:2.3:a:endymion:mailman_webmail:3.0.34:*:*:*:*:*:*:*
- cpe:2.3:a:endymion:mailman_webmail:3.0.35:*:*:*:*:*:*:*
- cpe:2.3:a:endymion:mailman_webmail:3.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:endymion:mailman_webmail:3.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:endymion:mailman_webmail:3.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:endymion:mailman_webmail:3.0.8:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- www.securityfocus.com/bid/4222nvdExploitPatchVendor Advisory
- online.securityfocus.com/archive/1/259730nvdVendor Advisory
- www.iss.net/security_center/static/8357.phpnvdVendor Advisory
- www.endymion.com/products/mailman/history.htmnvd
News mentions
0No linked articles in our index yet.