Vulnerability in University_of_washington Pine
CVE-2002-0014
URL-handling code in Pine 4.43 and earlier allows remote attackers to execute arbitrary commands via a URL enclosed in single quotes and containing shell metacharacters (&).
EPSS: 0.022 (80.0th percentile) — read the EPSS interpretation.
Affected products
- University_of_washington Pine — versions 4.20, 4.21, 4.30
- N/a — versions n/a
References
- cve@mitre.org (vendor-advisory, x_refsource_CONECTIVA)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Patch)
- cve@mitre.org (x_refsource_HP, vendor-advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)