CVE-2000-0353
HighExploitation Probability (EPSS)
High risk89th percentile - higher than 89% of all known CVEs
Summary
Pine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains a uudecoded file from a malicious web server, which is then executed by Pine.
Risk Assessment
An attacker can remotely take control of the system, potentially leading to data breaches or system compromise.
Recommendation
It is recommended to update Pine to the latest version and implement appropriate network security measures to minimize the risk of remote attacks.
Other vulnerabilities in Pine 4.x
See all- CVE-2000-0352High
Pine before version 4.21 does not properly filter shell metacharacters from URLs, allowing remote attackers to execute arbitrary commands via a malformed URL.
- CVE-1999-1187Medium
Pine before version 3.94 allows local users to gain privileges via a symlink attack on a lockfile that is created when a user receives new mail.
Original NVD description (English source)
Pine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains a uudecoded file from a malicious web server, which is then executed by Pine.