Unscored CVE-2002-0014 EUVD-2002-0014GHSA-jmm6-4qwp-jx6x

URL-handling code in Pine 4.43 and earlier allows remote attackers to execute arbitrary commands via a URL enclosed in single quotes and co…

Published Apr 2, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Description

URL-handling code in Pine 4.43 and earlier allows remote attackers to execute arbitrary commands via a URL enclosed in single quotes and containing shell metacharacters (&).

References

CLA-2002:460 vendor-advisory
3815 vdb-entry
RHSA-2002:009 vendor-advisory
HPSBTL0201-015 vendor-advisory
20020105 Pine 4.33 (at least) URL handler allows embedded commands. mailing-list