Pine vulnerabilities

Pine before version 4.21 does not properly filter shell metacharacters from URLs, allowing remote attackers to execute arbitrary commands via a malformed URL.

Pine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains a uudecoded file from a malicious web server, which is then executed by Pine.

Pine before version 3.94 allows local users to gain privileges via a symlink attack on a lockfile that is created when a user receives new mail.