Unscored CVE-2002-1903 EUVD-2002-1882GHSA-mr5f-r5qw-mrjr

Pine 4.2.1 through 4.4.4 puts Unix usernames and/or uid into Sender: and X-Sender: headers, which could allow remote attackers to obtain se…

Published Jun 28, 2005 · Updated Sep 16, 2024 · Assigned by mitre

Description

Pine 4.2.1 through 4.4.4 puts Unix usernames and/or uid into Sender: and X-Sender: headers, which could allow remote attackers to obtain sensitive information.

References

pine-username-disclosure(9297) vdb-entry
20020607 Pine 4.44 Privacy Patch mailing-list
4963 vdb-entry