CVE-2000-0352

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Pine before version 4.21 does not properly filter shell metacharacters from URLs, which allows remote attackers to execute arbitrary commands via a malformed URL.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published: Nov 18, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-035310.0Pine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains a uudecoded file from CVE-2000-03545.0mirror 2.8.x in Linux systems allows remote attackers to create files one level above the local target directory.CVE-2000-03557.5pg and pb in SuSE pbpg 1.x package allows an attacker to read arbitrary files.CVE-2000-03564.6Pluggable Authentication Modules (PAM) in Red Hat Linux 6.1 does not properly lock access to disabled NIS accounts.CVE-2000-03577.5ORBit and esound in Red Hat Linux 6.1 do not use sufficiently random numbers, which allows local users to guess the authentication keys.CVE-2000-03585.0ORBit and gnome-session in Red Hat Linux 6.1 allows remote attackers to crash a program.CVE-2000-035910.0Buffer overflow in Trivial HTTP (THTTPd) allows remote attackers to cause a denial of service or execute arbitrary commands via a long If-Mo CVE-2000-03605.0Buffer overflow in INN 2.2.1 and earlier allows remote attackers to cause a denial of service via a maliciously formatted article.CVE-2000-03612.1The PPP wvdial.lxdialog script in wvdial 1.4 and earlier creates a .config file with world readable permissions, which allows a local attack CVE-2000-03627.2Buffer overflows in Linux cdwtools 093 and earlier allows local users to gain root privileges.CVE-2000-03636.2Linux cdwtools 093 and earlier allows local users to gain root privileges via the /tmp directory.CVE-2000-03644.6screen and rxvt in Red Hat Linux 6.0 do not properly set the modes of tty devices, which allows local users to write to other ttys.