CVE-2002-1509
A patch for shadow-utils 20000902 causes the useradd command to create a mail spool files with...
A patch for shadow-utils 20000902 causes the useradd command to create a mail spool files with read/write privileges of the new user's group (mode 660), which allows other users in the same group to read or modify the new user's incoming email.
Exploit likelihood
What each source reports
NVD Score used
A patch for shadow-utils 20000902 causes the useradd command to create a mail spool files with read/write privileges of the new user's group (mode 660), which allows other users in the same group to read or modify the new user's incoming email.
- Record
CVE-2002-1509- CVSS 2.0
- 3.6 Low
AV:L/AC:L/Au:N/C:P/I:P/A:N - Updated
- 2026-11-02
CVE List No score
A patch for shadow-utils 20000902 causes the useradd command to create a mail spool files with read/write privileges of the new user's group (mode 660), which allows other users in the same group to read or modify the new user's incoming email.
- Record
CVE-2002-1509- Updated
- 2026-11-02
EUVDEUVD-2002-1492 No score
A patch for shadow-utils 20000902 causes the useradd command to create a mail spool files with read/write privileges of the new user's group (mode 660), which allows other users in the same group to read or modify the new user's incoming email.
- Record
EUVD-2002-1492- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qq5x-4fxh-3qvh No score
A patch for shadow-utils 20000902 causes the useradd command to create a mail spool files with...
A patch for shadow-utils 20000902 causes the useradd command to create a mail spool files with read/write privileges of the new user's group (mode 660), which allows other users in the same group to read or modify the new user's incoming email.
- Record
GHSA-qq5x-4fxh-3qvh- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2002-1509 is a low vulnerability (CVSS 3.6) in Redhat Linux, published March 3, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.37%, the 31st percentile. No source names a fixed version.