What is the severity of CVE-2000-0353?

CVE-2000-0353 is classified as high severity due to its ability to allow remote command execution.

How do I fix CVE-2000-0353?

To fix CVE-2000-0353, upgrade to Pine version 4.21 or later, which addresses this vulnerability.

What versions of Pine are affected by CVE-2000-0353?

CVE-2000-0353 affects Pine versions 3.98, 4.0, 4.2, and 4.10.

How does CVE-2000-0353 allow exploitation?

CVE-2000-0353 allows exploitation by executing arbitrary commands via a crafted index.html file.

What type of attack is facilitated by CVE-2000-0353?

CVE-2000-0353 facilitates a remote code execution attack through compromised HTML content.

Vulnerability/
CVE-2000-0353

critical

CWE

NVD-CWE-Other

28/6/1999

12/7/2000

20/11/2024

CVE-2000-0353

First published: Mon Jun 28 1999(Updated: )

Pine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains a uudecoded file from a malicious web server, which is then executed by Pine.

Credit: cve@mitre.org cve@mitre.org

Affected Software	Affected Version	How to fix
University of Washington PINE	=4.0
University of Washington PINE	=4.2
University of Washington PINE	=4.10
University of Washington PINE	=3.98

Remedy

http://www.securiteam.com/unixfocus/HHP-Pine_remote_exploit.html

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2000-0353?
CVE-2000-0353 is classified as high severity due to its ability to allow remote command execution.
How do I fix CVE-2000-0353?
To fix CVE-2000-0353, upgrade to Pine version 4.21 or later, which addresses this vulnerability.
What versions of Pine are affected by CVE-2000-0353?
CVE-2000-0353 affects Pine versions 3.98, 4.0, 4.2, and 4.10.
How does CVE-2000-0353 allow exploitation?
CVE-2000-0353 allows exploitation by executing arbitrary commands via a crafted index.html file.
What type of attack is facilitated by CVE-2000-0353?
CVE-2000-0353 facilitates a remote code execution attack through compromised HTML content.

agent/references
agent/type
agent/first-publish-date
collector/mitre-cve
source/MITRE
agent/remedy
agent/weakness
agent/severity
agent/description
agent/last-modified-date
agent/author
agent/softwarecombine
agent/event
agent/source
agent/tags
collector/nvd-api
source/NVD
agent/software-canonical-lookup
agent/software-canonical-lookup-request
collector/nvd-historical
collector/nvd-index
vendor/university of washington
canonical/university of washington pine
version/university of washington pine/3.98
version/university of washington pine/4.0
version/university of washington pine/4.2
version/university of washington pine/4.10

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.