Lucene search

K
exploitdbMartin J. MuenchEDB-ID:21644
HistoryJul 24, 2002 - 12:00 a.m.

Pine 4.x - Empty MIME Boundary Denial of Service

2002-07-2400:00:00
Martin J. Muench
www.exploit-db.com
17

AI Score

7.4

Confidence

Low

EPSS

0.022

Percentile

89.7%

source: https://www.securityfocus.com/bid/5301/info

Pine is an open source mail user agent distributed by the University of Washington. It is freely available for Unix, Linux, and Microsoft Operating Systems.

When a mail is received by pine that contains MIME content, and the value of the MIME boundary is blank, pine becomes unstable. This vulnerability has been discovered to cause a core dump in the pine client, and could be used to deny service to legitimate users of the client.

Sending an email to a pine user containing MIME content with the following fields set as specified will cause the crash:

Content-Type: multipart/mixed; boundary=""
Mime-Version: 1.0

AI Score

7.4

Confidence

Low

EPSS

0.022

Percentile

89.7%

Related for EDB-ID:21644