CVE-2000-0352: Critical severity University of Washington pine vulnerability

Published Nov 18, 1999

Updated

Pine before version 4.21 does not properly filter shell metacharacters from URLs, which allows remote attackers to execute arbitrary commands via a malformed URL.

Affected Software

2 affected components

University of Washington pine=4.21

University of Washington pine=4.20

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade PINE to a version that resolves this vulnerability.
Fixed in 4.21

Event History

Nov 18, 1999

CVE Published

05:00 AM

Data Sourced

via NVD·05:00 AM

DescriptionSeverityAffected Software

Jul 12, 2000

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2000-0352?

CVE-2000-0352 is considered a high severity vulnerability due to the potential for remote command execution.

How do I fix CVE-2000-0352?

To fix CVE-2000-0352, upgrade to Pine version 4.21 or later, which includes proper filtering of shell metacharacters.

What software versions are affected by CVE-2000-0352?

CVE-2000-0352 affects Pine versions before 4.21, specifically version 4.20 and prior.

Can CVE-2000-0352 be exploited remotely?

Yes, CVE-2000-0352 can be exploited remotely through the use of specially crafted URLs.

What are the potential consequences of exploiting CVE-2000-0352?

Exploiting CVE-2000-0352 can allow attackers to execute arbitrary commands on the server, leading to data compromise or system takeover.