Description
Pine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains a uudecoded file from a malicious web server, which is then executed by Pine.
References
- 19990628 Execution of commands in Pine 4.x vendor-advisory
- http://www.securiteam.com/unixfocus/HHP-Pine_remote_exploit.html
- 19990911 Update for Pine (fixed IMAP support) vendor-advisory
- 1247 vdb-entry