Lucene search

K
cve[email protected]CVE-2000-0353
HistoryJul 12, 2000 - 4:00 a.m.

CVE-2000-0353

2000-07-1204:00:00
web.nvd.nist.gov
25
pine 4.x
remote execution
vulnerability
index.html
arbitrary command execution.

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.9 High

AI Score

Confidence

Low

0.01 Low

EPSS

Percentile

83.8%

Pine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains a uudecoded file from a malicious web server, which is then executed by Pine.

Affected configurations

NVD
Node
university_of_washingtonpineMatch3.98
OR
university_of_washingtonpineMatch4.0
OR
university_of_washingtonpineMatch4.2
OR
university_of_washingtonpineMatch4.10

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.9 High

AI Score

Confidence

Low

0.01 Low

EPSS

Percentile

83.8%

Related for CVE-2000-0353