CVE-1999-1187

Medium

Published: 26/08/1996(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

22th percentile - higher than 22% of all known CVEs

Pine before version 3.94 allows local users to gain privileges via a symlink attack on a lockfile that is created when a user receives new mail.

An attacker could exploit this vulnerability to gain unauthorized access to the system, potentially leading to serious data security issues.

It is recommended to upgrade Pine to version 3.94 or later to mitigate this vulnerability.

Original NVD description (English source)

Pine before version 3.94 allows local users to gain privileges via a symlink attack on a lockfile that is created when a user receives new mail.