Skip to content

CVE-2002-0389

Pipermail in Mailman stores private mail messages with predictable filenames in a world...

2.1 LowFix available

CVE-2002-0389 is a low vulnerability (CVSS 2.1) in Gnu Mailman, published June 18, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.43%, the 37th percentile. Fixed in mailman 3:2.1.12-25.el6.

Pipermail in Mailman stores private mail messages with predictable filenames in a world-executable directory, which allows local users to read private mailing list archives.

Exploit likelihood

0.43%Down 0.5 points since Feb 4, 2022

What each source reports

NVD Score used 2.1

Pipermail in Mailman stores private mail messages with predictable filenames in a world-executable directory, which allows local users to read private mailing list archives.

Record: CVE-2002-0389
CVSS 2.0: 2.1 LowAV:L/AC:L/Au:N/C:P/I:N/A:N
Updated: 2026-11-02

CVE List No score

Pipermail in Mailman stores private mail messages with predictable filenames in a world-executable directory, which allows local users to read private mailing list archives.

Record: CVE-2002-0389
Updated: 2026-11-02

EUVDEUVD-2002-0386 No score

Pipermail in Mailman stores private mail messages with predictable filenames in a world-executable directory, which allows local users to read private mailing list archives.

Record: EUVD-2002-0386
Updated: 2026-11-03

GitHub AdvisoriesGHSA-pvv2-68cw-w39c No score

Pipermail in Mailman stores private mail messages with predictable filenames in a world...

Pipermail in Mailman stores private mail messages with predictable filenames in a world-executable directory, which allows local users to read private mailing list archives.

Record: GHSA-pvv2-68cw-w39c
Updated: 2026-11-02

Affected products

gnu mailman

Affected packages

Affected packages
Package	Affected	Fixed
`mailman` Red Hat:enterprise_linux:6::server	before 3:2.1.12-25.el6	3:2.1.12-25.el6
`mailman-debuginfo` Red Hat:enterprise_linux:6::server	before 3:2.1.12-25.el6	3:2.1.12-25.el6
`mailman` Red Hat:enterprise_linux:6::workstation	before 3:2.1.12-25.el6	3:2.1.12-25.el6
`mailman-debuginfo` Red Hat:enterprise_linux:6::workstation	before 3:2.1.12-25.el6	3:2.1.12-25.el6

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 16 moreShow less