CyberSec.Space Logo
CVEブラウザに戻る

CVE-2000-0352

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0040%
EPSS Percentile39.65th
Published1999年11月18日
Last Modified2026年4月16日

Vulnerability Description

Pine before version 4.21 does not properly filter shell metacharacters from URLs, which allows remote attackers to execute arbitrary commands via a malformed URL.

Affected Platforms (CPE)

📦
University Of Washington

Pine

= 4.20
📦
University Of Washington

Pine

= 4.21

References & Advisories

🔗 ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-036.0.txt
🔗 http://www.novell.com/linux/security/advisories/suse_security_announce_36.html
🔗 http://www.securityfocus.com/bid/810
🔗 http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.9911171818220.12375-100000%40ray.compu-aid.com
🔗 ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-036.0.txt
🔗 http://www.novell.com/linux/security/advisories/suse_security_announce_36.html
🔗 http://www.securityfocus.com/bid/810
🔗 http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.9911171818220.12375-100000%40ray.compu-aid.com

関連する脆弱性情報

CVE-2000-035310.0

Pine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains a uudecoded...

CVE-2002-23257.8

The c-client library in Internet Message Access Protocol (IMAP) dated before 2002 RC2, as used by Pine 4.20 through 4.44, allows r...

CVE-2000-08477.5

Buffer overflow in University of Washington c-client library (used by pine and other programs) allows remote attackers to execute ...

CVE-2000-09097.5

Buffer overflow in the automatic mail checking component of Pine 4.21 and earlier allows remote attackers to execute arbitrary com...