Vulnerability in Redhat Linux
CVE-2002-1509
A patch for shadow-utils 20000902 causes the useradd command to create a mail spool files with read/write privileges of the new user's group (mode 660), which allows other users in the same group to read or modify the new user's incoming email.
EPSS: 0.004 (29.9th percentile) — read the EPSS interpretation.
Affected products
- Redhat Linux — versions 7.2, 7.3, 8.0
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory)
- cve@mitre.org (vendor-advisory, x_refsource_MANDRAKE)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory)