5
CVSSv2

CVE-2002-1903

Published: 31/12/2002 Updated: 05/09/2008
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

Pine 4.2.1 up to and including 4.4.4 puts Unix usernames and/or uid into Sender: and X-Sender: headers, which could allow remote malicious users to obtain sensitive information.

Vulnerable Product Search on Vulmon Subscribe to Product

university of washington pine 4.21

university of washington pine 4.30

university of washington pine 4.44

university of washington pine 4.33