PI
Product
Pine
15
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Pine to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2005-1066 | – | May 2 | Race condition in rpdump in Pine 4.62 and earlier allows local users to overwrite arbitrary files via a symlink attack Affected: 4.62 |
| CVE-2003-0720 | – | Sep 17 | Buffer overflow in PINE before 4.58 allows remote attackers to execute arbitrary code via a malformed message/external-body MIME type Affected: 3.98; 4.0.2; 4.0.4; 4.10; 4.20; 4.21; +7 more |
| CVE-2003-0300 | – | Jun 16 | The IMAP Client for Sylpheed 0.8.11 allows remote malicious IMAP servers to cause a denial of service (crash) via certain large literal size values that cause either integer… Affected: 4.53 |
| CVE-2003-0297 | – | Jun 16 | c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of service (crash) and possibly execute arbitrary code via… Affected: 4.53 |
| CVE-2002-1903 | – | Dec 31 | Pine 4.2.1 through 4.4.4 puts Unix usernames and/or uid into Sender: and X-Sender: headers, which could allow remote attackers to obtain sensitive information Affected: 4.21; 4.30; 4.33; 4.44 |
| CVE-2002-2325 | – | Dec 31 | The c-client library in Internet Message Access Protocol (IMAP) dated before 2002 RC2, as used by Pine 4.20 through 4.44, allows remote attackers to cause a denial of service… Affected: 4.20; 4.21; 4.30; 4.33; 4.44 |
| CVE-2002-1320 | – | Dec 11 | Pine 4.44 and earlier allows remote attackers to cause a denial of service (core dump and failed restart) via an email message with a From header that contains a large number of… Affected: 3.98; 4.0.2; 4.0.4; 4.10; 4.20; 4.21; +3 more |
| CVE-2002-0014 | – | Jul 26 | URL-handling code in Pine 4.43 and earlier allows remote attackers to execute arbitrary commands via a URL enclosed in single quotes and containing shell metacharacters (&) Affected: 4.20; 4.21; 4.30; 4.33 |
| CVE-2001-0736 | – | Oct 18 | Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local users to overwrite arbitrary files via a symlink attack Affected: through 4.33 |
| CVE-2000-0909 | – | Dec 19 | Buffer overflow in the automatic mail checking component of Pine 4.21 and earlier allows remote attackers to execute arbitrary commands via a long From: header Affected: 4.0.4; 4.10; 4.21 |
| CVE-2000-0847 | – | Nov 14 | Buffer overflow in University of Washington c-client library (used by pine and other programs) allows remote attackers to execute arbitrary commands via a long X-Keywords header Affected: 4.20; 4.21 |
| CVE-2000-0352 | – | Nov 18 | Pine before version 4.21 does not properly filter shell metacharacters from URLs, which allows remote attackers to execute arbitrary commands via a malformed URL Affected: 4.20; 4.21 |
| CVE-2000-0353 | – | Jun 28 | Pine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains a uudecoded file from a malicious web server, which is then… Affected: 3.98; 4.0; 4.2; 4.10 |
| CVE-1999-0004 | – | Dec 16 | MIME buffer overflow in email clients, e.g Affected: 4.02 |
| CVE-1999-1187 | – | Aug 26 | Pine before version 3.94 allows local users to gain privileges via a symlink attack on a lockfile that is created when a user receives new mail Affected: through 3.94 |
Showing 15