University OF Washington
University OF Washington Pine: vulnerabilidades y CVE
University OF Washington Pine tiene 15 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE15
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2005-1066 | Baja (1.2) | 0.30% | — | 2 may 2005 | Race condition in rpdump in Pine 4.62 and earlier allows local users to overwrite arbitrary files via a symlink attack. |
| CVE-2003-0720 | Alta (7.5) | 13% | — | 17 sept 2003 | Buffer overflow in PINE before 4.58 allows remote attackers to execute arbitrary code via a malformed message/external-body MIME type. |
| CVE-2003-0297 | Alta (7.5) | 2.7% | — | 16 jun 2003 | c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of service (crash) and possibly execute arbitrary code via certain large (1) literal and (2) mailbox size… |
| CVE-2003-0300 | Media (5) | 3.4% | — | 16 jun 2003 | The IMAP Client for Sylpheed 0.8.11 allows remote malicious IMAP servers to cause a denial of service (crash) via certain large literal size values that cause either integer signedness errors or integer overflow errors. |
| CVE-2002-1903 | Media (5) | 1.4% | — | 31 dic 2002 | Pine 4.2.1 through 4.4.4 puts Unix usernames and/or uid into Sender: and X-Sender: headers, which could allow remote attackers to obtain sensitive information. |
| CVE-2002-2325 | Alta (7.8) | 3.5% | — | 31 dic 2002 | The c-client library in Internet Message Access Protocol (IMAP) dated before 2002 RC2, as used by Pine 4.20 through 4.44, allows remote attackers to cause a denial of service (client crash) via a MIME-encoded email with… |
| CVE-2002-1320 | Media (5) | 9.6% | — | 11 dic 2002 | Pine 4.44 and earlier allows remote attackers to cause a denial of service (core dump and failed restart) via an email message with a From header that contains a large number of quotation marks ("). |
| CVE-2002-0014 | Alta (7.5) | 2.2% | — | 26 jul 2002 | URL-handling code in Pine 4.43 and earlier allows remote attackers to execute arbitrary commands via a URL enclosed in single quotes and containing shell metacharacters (&). |
| CVE-2001-0736 | Baja (2.1) | 0.81% | — | 18 oct 2001 | Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local users to overwrite arbitrary files via a symlink attack. |
| CVE-2000-0909 | Alta (7.5) | 12% | — | 19 dic 2000 | Buffer overflow in the automatic mail checking component of Pine 4.21 and earlier allows remote attackers to execute arbitrary commands via a long From: header. |
| CVE-2000-0847 | Alta (7.5) | 2.5% | — | 14 nov 2000 | Buffer overflow in University of Washington c-client library (used by pine and other programs) allows remote attackers to execute arbitrary commands via a long X-Keywords header. |
| CVE-2000-0352 | Alta (10) | 3.5% | — | 18 nov 1999 | Pine before version 4.21 does not properly filter shell metacharacters from URLs, which allows remote attackers to execute arbitrary commands via a malformed URL. |
| CVE-2000-0353 | Alta (10) | 3.8% | — | 28 jun 1999 | Pine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains a uudecoded file from a malicious web server, which is then executed by Pine. |
| CVE-1999-0004 | Media (5) | 2.8% | — | 16 dic 1997 | MIME buffer overflow in email clients, e.g. Solaris mailtool and Outlook. |
| CVE-1999-1187 | Media (4.6) | 0.31% | — | 26 ago 1996 | Pine before version 3.94 allows local users to gain privileges via a symlink attack on a lockfile that is created when a user receives new mail. |