CVE-2002-1582

compose.cgi in Mailreader.com 2.3.30 and 2.3.31, when using Sendmail as the Mail Transfer Agent, allows remote attackers to execute arbitrary commands via shell metacharacters in the RealEmail configuration variable, which is used to call Sendmail in network.cgi.

• http://www.iss.net/security_center/static/10491.phpPatch, Vendor Advisory
• http://www.mailreader.com/download/ChangeLogVendor Advisory
• http://www.securityfocus.com/archive/1/297428Exploit, Patch, Vendor Advisory
• http://www.securityfocus.com/bid/6058Patch, Vendor Advisory
• http://www.iss.net/security_center/static/10491.phpPatch, Vendor Advisory
• http://www.mailreader.com/download/ChangeLogVendor Advisory
• http://www.securityfocus.com/archive/1/297428Exploit, Patch, Vendor Advisory
• http://www.securityfocus.com/bid/6058Patch, Vendor Advisory

Published

Dec 6, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2002-1576lserver in SAP DB 7.3 and earlier uses the current working d…
• CVE-2002-1577SAP R/3 2.0B to 4.6D installs several clients with default u…
• CVE-2002-1578The default installation of SAP R/3, when using Oracle and S…
• CVE-2002-1579SAP GUI (Sapgui) 4.6D allows remote attackers to cause a den…
• CVE-2002-1580Integer overflow in imapparse.c for Cyrus IMAP server 1.4 an…
• CVE-2002-1581Directory traversal vulnerability in nph-mr.cgi in Mailreade…
• CVE-2002-1583Buffer overflow in sqllib/security/db2ckpw for IBM DB2 Unive…
• CVE-2002-1584Unknown vulnerability in the AUTH_DES authentication for RPC…
• CVE-2002-1585Unknown vulnerability in Solaris 8 for Intel and Solaris 8 a…
• CVE-2002-1586Solaris 2.5.1 through 9 allows local users to cause a denial…
• CVE-2002-1587The libthread library (libthread.so.1) for Solaris 2.5.1 thr…
• CVE-2002-1588Mailtool for OpenWindows 3.6, 3.6.1, and 3.6.2 allows remote…