CVE-2008-3395: Calacode @Mail 5.41 on Linux uses weak world-readable permissions for (1) webmail/libs/Atmail/Config.php an...

Security readout for executives and security teams

Calacode @Mail 5.41 on Linux reportedly installs sensitive webmail files with overly broad read permissions. A local user could read configuration or password-related files and gain information useful for further compromise. The CVE notes the provenance is unknown, so treat it as a legacy exposure requiring verification rather than confirmed active exploitation. Exposure is most likely in legacy Linux deployments of Calacode @Mail 5.41 where local users or compromised local processes can read the named files. Internet-only attackers are not described in the supplied evidence. Prioritize if @Mail 5.41 still exists on shared or multi-user Linux systems. The main business concern is credential or configuration leakage from legacy infrastructure. If the product is absent, no action is required beyond documentation. Mitigation focus: Check vendor guidance for any supported fix or upgrade path.; Restrict file permissions to required service accounts only.; Review local user access on affected Linux hosts..

Prepared

Jun 28, 2026, 18:33 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.