CVE-2001-0273

CVE-2001-0273 affects pgp4pine 1.75-6. The module fails to verify whether public keys loaded from GnuPG are expired, which can lead to encrypt attempts returning errors while the cleartext message is transmitted. According to CERT/CC and NVD entries, the vulnerability can cause sensitive informat...

CVE-2001-0273

pgp4pine Pine/PGP interface version 1.75-6 does not properly check to see if a public key has expired when obtaining the keys via Gnu Privacy Guard GnuPG, which causes the message to be sent in cleartext...

PALS Library System "show files" Vulnerability and remote command execution

Name: PALS Library System "show files" Vulnerability and remote command executiom. Date: 02.02.2001 About: This script is derived from an idea originated at St.Olaf College to provide a www interface to the PALS Library System. This idea was then worked on at Georgia State University. This versio...

CVE-2000-0909

The connected Mandrake advisory documents a buffer overflow in Pine 4.21 and earlier during the automatic mail checking (periodic new mail) when processing a long From: header, enabling remote code execution by a crafted email. The issue affects the Pine mail reader; an updated package (MDKSA-200...

CVE-2000-0909

Buffer overflow in the automatic mail checking component of Pine 4.21 and earlier allows remote attackers to execute arbitrary commands via a long From: header...

Pine (Local Message Grabber) - Local Message Read

!/bin/sh Grab local pine messages Usage: ./monpine.sh victim pine must use following settings [email protected] http://hacksware.com x enable-alternate-editor-cmd x enable-alternate-editor-implicitly editor = /usr/bin/vi PID=$1 PICOFILE=printf "/tmp/pico.%.6d" $PID TRASHCAN=/tmp/.trashcan.date|se...

Pine (Local Message Grabber) - Local Message Read

Pine Local Message Grabber - Local Message Read !/bin/sh Grab local pine messages Usage: ./monpine.sh victim pine must use following settings [email protected] http://hacksware.com x enable-alternate-editor-cmd x enable-alternate-editor-implicitly editor = /usr/bin/vi PID=$1 PICOFILE=printf...

Pine (Local Message Grabber) Exploit

Exploit for linux platform in category local exploits ==================================== Pine Local Message Grabber Exploit ==================================== !/bin/sh Grab local pine messages Usage: ./monpine.sh victim pine must use following settings email protected http://hacksware.com x...

[hacksware]Pine temporary file hijacking vulnerability

Hacksware Bug Report 1. Name: Pine temporary file hijacking vulnerability 2. Release Date: 2000.12.11 3. Affected Application: Pine Version 4.30or maybe other versions 4. Author: [email protected] 5. Type: Local Race Condition 6. Explanation If pine setting is like following: x...

Дырка в pine

Редактируемое сообщение помещается во временный файл с предсказуемым именем без проверки разрешений и символьных линков...

mon_pine.sh

Hacksware Bug Report 1. Name: Pine temporary file hijacking vulnerability 2. Release Date: 2000.12.11 3. Affected Application: Pine Version 4.30or maybe other versions 4. Author: [email protected] 5. Type: Local Race Condition 6. Explanation If pine setting is like following: x...

University of Washington Pico 3.x/4.x - File Overwrite

source: https://www.securityfocus.com/bid/2097/info A vulnerability exists in several versions of University of Washington's Pico, a widely-distributed text editor shipped with most versions of Linux / Unix. Under very specific circumstances, it is possible to cause this version of Pico to...

University of Washington Pico 3.x4.x - File Overwrite

University of Washington Pico 3.x4.x - File Overwrite source: https://www.securityfocus.com/bid/2097/info A vulnerability exists in several versions of University of Washington's Pico, a widely-distributed text editor shipped with most versions of Linux / Unix. Under very specific circumstances, ...

buffer overflow vulnerability in Pine

Pine versions 4.21 and before contain a buffer overflow vulnerability which allows a remote user to execute arbitrary code on the local client by the sending of a special-crafted email message. The overflow occurs during the periodic "new mail" checking of an open folder. By upgrading to Pine 4.3...

Ports Security Advisory: FreeBSD-SA-00:59.pine

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:59 Security Advisory FreeBSD, Inc. Topic: pine4 port contains remote vulnerability Category: ports Module: pine4/pine4-ssl/zh-pine4/iw-pine4 Announced: 2000-10-30 Affects...

Переполнение буфера в pine

Классическое переполнение буфера в процедуре периодической проверки почты при длинном заголовке From: письма...

FreeBSD-SA-00:59.pine

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:59 Security Advisory FreeBSD, Inc. Topic: pine4 port contains remote vulnerability Category: ports Module: pine4/pine4-ssl/zh-pine4/iw-pine4 Announced: 2000-10-30 Affects...

pine421.txt

/ PINE Exploit 4.21 bTm Proof of Concept: Pine 4.21 There exists a vulnerability in Pine 4.21 involving the portion of code in charge of peroidically checking email when a pine client is open. Run pine in one window, then send an email to the account owning that session. Switch back over and hit...

UoW Pine 4.0.44.104.21 - From: Remote Buffer Overflow

UoW Pine 4.0.44.104.21 - From: Remote Buffer Overflow // source: https://www.securityfocus.com/bid/1709/info A buffer overflow vulnerability exists in the popular mail client Pine 4.21 and possibly earlier versions, relating to the function which regularly checks for incoming email. In standard...

UoW Pine 4.0.4/4.10/4.21 - 'From:' Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/1709/info A buffer overflow vulnerability exists in the popular mail client Pine 4.21 and possibly earlier versions, relating to the function which regularly checks for incoming email. In standard e-mail message headers is a field that holds the name a...