university of washington pine vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv2

Buffer overflow in PINE prior to 4.58 allows remote malicious users to execute arbitrary code via a malformed message/external-body MIME type.

University Of Washington Pine 4.20 University Of Washington Pine 4.21 University Of Washington Pine 4.56 University Of Washington Pine 4.30 University Of Washington Pine 4.33 University Of Washington Pine 4.0.4 University Of Washington Pine 4.10 University Of Washington Pine 4.52 University Of Washington Pine 4.53 University Of Washington Pine 3.98 University Of Washington Pine 4.0.2 University Of Washington Pine 4.44 University Of Washington Pine 4.50

1 EDB exploit

5

CVSSv2

Pine 4.44 and previous versions allows remote malicious users to cause a denial of service (core dump and failed restart) via an email message with a From header that contains a large number of quotation marks (").

University Of Washington Pine 4.10 University Of Washington Pine 4.20 University Of Washington Pine 3.98 University Of Washington Pine 4.33 University Of Washington Pine 4.44 University Of Washington Pine 4.0.2 University Of Washington Pine 4.0.4 University Of Washington Pine 4.21 University Of Washington Pine 4.30

1 EDB exploit

7.8

CVSSv2

The c-client library in Internet Message Access Protocol (IMAP) dated prior to 2002 RC2, as used by Pine 4.20 up to and including 4.44, allows remote malicious users to cause a denial of service (client crash) via a MIME-encoded email with Content-Type header containing an empty ...

University Of Washington Pine 4.44 University Of Washington Pine 4.20 University Of Washington Pine 4.21 University Of Washington Pine 4.30 University Of Washington Pine 4.33

1 EDB exploit

10

CVSSv2

Pine 4.x allows a remote malicious user to execute arbitrary commands via an index.html file which executes lynx and obtains a uudecoded file from a malicious web server, which is then executed by Pine.

University Of Washington Pine 4.2 University Of Washington Pine 4.0 University Of Washington Pine 3.98 University Of Washington Pine 4.10

5

CVSSv2

Pine 4.2.1 up to and including 4.4.4 puts Unix usernames and/or uid into Sender: and X-Sender: headers, which could allow remote malicious users to obtain sensitive information.

University Of Washington Pine 4.21 University Of Washington Pine 4.30 University Of Washington Pine 4.44 University Of Washington Pine 4.33

7.5

CVSSv2

URL-handling code in Pine 4.43 and previous versions allows remote malicious users to execute arbitrary commands via a URL enclosed in single quotes and containing shell metacharacters (&).

University Of Washington Pine 4.20 University Of Washington Pine 4.21 University Of Washington Pine 4.30 University Of Washington Pine 4.33

7.5

CVSSv2

Buffer overflow in the automatic mail checking component of Pine 4.21 and previous versions allows remote malicious users to execute arbitrary commands via a long From: header.

University Of Washington Pine 4.0.4 University Of Washington Pine 4.10 University Of Washington Pine 4.21

1 EDB exploit

7.5

CVSSv2

Buffer overflow in University of Washington c-client library (used by pine and other programs) allows remote malicious users to execute arbitrary commands via a long X-Keywords header.

University Of Washington Imap 4.7b University Of Washington Imap 4.7c University Of Washington Pine 4.20 University Of Washington Pine 4.21

10

CVSSv2

Pine before version 4.21 does not properly filter shell metacharacters from URLs, which allows remote malicious users to execute arbitrary commands via a malformed URL.

University Of Washington Pine 4.21 University Of Washington Pine 4.20

7.5

CVSSv2

c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of service (crash) and possibly execute arbitrary code via certain large (1) literal and (2) mailbox size values that cause either integer signedness errors or intege...

University Of Washington Pine 4.53 University Of Washington C-client University Of Washington Imap-2002b

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook