Lucene search
MitreCVE-2000-0353HistoryJul 12, 2000 - 4:00 a.m.
CVE-2000-0353
2000-07-1204:00:00
mitre
web.nvd.nist.gov
28
pine 4.x
remote execution
vulnerability
index.html
arbitrary command execution.
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.9
Confidence
Low
EPSS
0.01
Percentile
83.8%
Pine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains a uudecoded file from a malicious web server, which is then executed by Pine.
Affected configurations
Node
university_of_washingtonpineMatch3.98
ORuniversity_of_washingtonpineMatch4.0
ORuniversity_of_washingtonpineMatch4.2
ORuniversity_of_washingtonpineMatch4.10
| Vendor | Product | Version | CPE |
|---|---|---|---|
| university_of_washington | pine | 3.98 | cpe:2.3:a:university_of_washington:pine:3.98:*:*:*:*:*:*:* |
| university_of_washington | pine | 4.0 | cpe:2.3:a:university_of_washington:pine:4.0:*:*:*:*:*:*:* |
| university_of_washington | pine | 4.2 | cpe:2.3:a:university_of_washington:pine:4.2:*:*:*:*:*:*:* |
| university_of_washington | pine | 4.10 | cpe:2.3:a:university_of_washington:pine:4.10:*:*:*:*:*:*:* |
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.9
Confidence
Low
EPSS
0.01
Percentile
83.8%
Related for CVE-2000-0353