CVE-2000-0352
HighExploitation Probability (EPSS)
High risk88th percentile - higher than 88% of all known CVEs
Summary
Pine before version 4.21 does not properly filter shell metacharacters from URLs, allowing remote attackers to execute arbitrary commands via a malformed URL.
Risk Assessment
An attacker could exploit this vulnerability to execute remote code, potentially leading to system compromise or data leakage.
Recommendation
It is recommended to upgrade Pine to version 4.21 or later to mitigate this vulnerability.
Other vulnerabilities in Pine
See all- CVE-2000-0353High
Pine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains a uudecoded file from a malicious web server, which is then executed by Pine.
- CVE-1999-1187Medium
Pine before version 3.94 allows local users to gain privileges via a symlink attack on a lockfile that is created when a user receives new mail.
Original NVD description (English source)
Pine before version 4.21 does not properly filter shell metacharacters from URLs, which allows remote attackers to execute arbitrary commands via a malformed URL.