CVE-2002-1509

CVE-2002-1509 describes a vulnerability in the useradd command within shadow-utils 20000902 on Red Hat Linux. A patch inadvertently caused newly created mail spool files to have insecure permissions (mode 660), allowing other users in the same group to read or modify a new user's incoming email. This vulnerability has a CVSS score of 3.6 (low severity), indicating a local attack vector with low complexity, potentially leading to partial confidentiality and integrity compromise. Its EPSS score is very low, suggesting a minimal likelihood of exploitation. There is no evidence of active exploitation, nor is exploit code available on platforms like Metasploit or ExploitDB. Despite this, the CVE has garnered some community discussion, primarily on GitHub, but has received no media coverage.