Vulnerability in University_of_washington Pine

CVE-2000-0352

Pine before version 4.21 does not properly filter shell metacharacters from URLs, which allows remote attackers to execute arbitrary commands via a malformed URL.

EPSS: 0.035 (87.7th percentile) — read the EPSS interpretation.

Affected products

University_of_washington Pine — versions 4.20, 4.21
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (vendor-advisory, x_refsource_SUSE)