CVE-2000-0353

Published: Jun 28, 1999Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Pine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains a uudecoded file from a malicious web server, which is then executed by Pine.

Affected (4)

Products: University Of Washington: Pine

University Of Washington

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
University Of Washington Pine	Version 3.98
University Of Washington Pine	Version 4.0
University Of Washington Pine	Version 4.10
University Of Washington Pine	Version 4.2

References (8)

http://www.novell.com/linux/security/advisories/pine_update_announcement.html

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/suse_security_announce_6.html

Source: cve@mitre.org

http://www.securiteam.com/unixfocus/HHP-Pine_remote_exploit.html

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://www.securityfocus.com/bid/1247

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/pine_update_announcement.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/suse_security_announce_6.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securiteam.com/unixfocus/HHP-Pine_remote_exploit.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

http://www.securityfocus.com/bid/1247

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.