Lucene search
HistoryApr 02, 2003 - 5:00 a.m.
CVE-2002-0014
cve-2002-0014
pine 4.43
url-handling code
remote attacks
shell metacharacters
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.7 High
AI Score
Confidence
High
0.009 Low
EPSS
Percentile
82.4%
URL-handling code in Pine 4.43 and earlier allows remote attackers to execute arbitrary commands via a URL enclosed in single quotes and containing shell metacharacters (&).
Affected configurations
Node
university_of_washingtonpineMatch4.20
ORuniversity_of_washingtonpineMatch4.21
ORuniversity_of_washingtonpineMatch4.30
ORuniversity_of_washingtonpineMatch4.33
Related
openvas
openvas
FreeBSD Ports: pine, zh-pine, iw-pine
2008-09-04 00:00:00
FreeBSD Ports: pine, zh-pine, iw-pine
2008-09-04 00:00:00
nvd
nvd
CVE-2002-0014
2002-07-26 04:00:00
cvelist
cvelist
CVE-2002-0014
2003-04-02 05:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.7 High
AI Score
Confidence
High
0.009 Low
EPSS
Percentile
82.4%
Related for CVE-2002-0014