CVE-2002-1582: compose.cgi in Mailreader.com 2.3.30 and 2.3.31, when using Sendmail as the Mail Transfer Agent, allows rem...

Security readout for executives and security teams

This is an old remote command execution issue in Mailreader.com when versions 2.3.30 or 2.3.31 use Sendmail. A remote attacker could abuse mail composition handling to run commands on the server. The bundle does not provide CVSS, confirmed fixes, or active exploitation evidence. Likely exposure is limited to legacy Mailreader.com 2.3.30 or 2.3.31 installations configured with Sendmail. Internet-facing webmail deployments would be the main concern. The source bundle lists affected vendor/product fields as n/a, so asset validation must rely on local software inventory and configuration review. Prioritize this if any affected Mailreader.com instance still exists. Remote command execution on a mail server can expose email data and support broader compromise. If no such legacy deployment is present, record it as not applicable after verification. Mitigation focus: Identify and retire any Mailreader.com 2.3.30 or 2.3.31 installations.; Check the vendor ChangeLog and advisories for corrected versions or configuration guidance.; Temporarily restrict web access to affected Mailreader.com instances..

Prepared

Jun 30, 2026, 05:11 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.