Description
Pine before version 3.94 allows local users to gain privileges via a symlink attack on a lockfile that is created when a user receives new mail.
References
- 19960826 [BUG] Vulnerability in PINE mailing-list
- pine-tmpfile(416) vdb-entry
Published Sep 12, 2001 · Updated Aug 1, 2024 · Assigned by mitre
Pine before version 3.94 allows local users to gain privileges via a symlink attack on a lockfile that is created when a user receives new mail.