Описание
Pine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains a uudecoded file from a malicious web server, which is then executed by Pine.
Ссылки
- ExploitPatchVendor Advisory
- ExploitPatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:university_of_washington:pine:3.98:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:pine:4.0:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:pine:4.2:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:pine:4.10:*:*:*:*:*:*:*
EPSS
Процентиль: 89%
0.03877
Низкий
10 Critical
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
больше 4 лет назад
Pine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains a uudecoded file from a malicious web server, which is then executed by Pine.
EPSS
Процентиль: 89%
0.03877
Низкий
10 Critical
CVSS2
Дефекты
NVD-CWE-Other