CVE-2002-1392
faxspool in mgetty before 1.1.29 uses a world-writable spool directory for outgoing faxes, which...
faxspool in mgetty before 1.1.29 uses a world-writable spool directory for outgoing faxes, which allows local users to modify fax transmission privileges.
Exploit likelihood
What each source reports
NVD Score used
faxspool in mgetty before 1.1.29 uses a world-writable spool directory for outgoing faxes, which allows local users to modify fax transmission privileges.
- Record
CVE-2002-1392- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
faxspool in mgetty before 1.1.29 uses a world-writable spool directory for outgoing faxes, which allows local users to modify fax transmission privileges.
- Record
CVE-2002-1392- Updated
- 2026-11-02
EUVDEUVD-2002-1376 No score
faxspool in mgetty before 1.1.29 uses a world-writable spool directory for outgoing faxes, which allows local users to modify fax transmission privileges.
- Record
EUVD-2002-1376- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f5rc-6j65-w2pp No score
faxspool in mgetty before 1.1.29 uses a world-writable spool directory for outgoing faxes, which...
faxspool in mgetty before 1.1.29 uses a world-writable spool directory for outgoing faxes, which allows local users to modify fax transmission privileges.
- Record
GHSA-f5rc-6j65-w2pp- Updated
- 2026-11-02
OSV No score
faxspool in mgetty before 1.1.29 uses a world-writable spool directory for outgoing faxes, which allows local users to modify fax transmission privileges.
- Record
CVE-2002-1392- Updated
- 2026-11-02
OSVDEBIAN-CVE-2002-1392 No score
faxspool in mgetty before 1.1.29 uses a world-writable spool directory for outgoing faxes, which allows local users to modify fax transmission privileges.
- Record
DEBIAN-CVE-2002-1392- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2002-1392 is a low vulnerability (CVSS 2.1) in Gert Doering Mgetty, published January 17, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 30th percentile. Fixed in mgetty 1.1.30-1.
References
exchange.xforce.ibmcloud.com/vulnerabilities/11070
securityfocus.com/bid/7302
redhat.com/support/errata/RHSA-2003-036.html
marc.info?l=bugtraq&m=105154413326136&w=2
search.alphanet.ch/cgi-bin/search.cgi?msgid=20021125142338.E12094%40greenie.muc.de&max_results=1&type=long&domain=ml-mgetty
nvd.nist.gov/vuln/detail/CVE-2002-1392
github.com/advisories/GHSA-f5rc-6j65-w2pp
security-tracker.debian.org/tracker/CVE-2002-1392