CVE-2002-0014
published 2002-07-26CVE-2002-0014: URL-handling code in Pine 4.43 and earlier allows remote attackers to execute arbitrary commands via a URL enclosed in single quotes and containing shell…
PriorityP430high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
2.18%
80.1th percentile
URL-handling code in Pine 4.43 and earlier allows remote attackers to execute arbitrary commands via a URL enclosed in single quotes and containing shell metacharacters (&).
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| university_of_washington | pine | — | — |
| university_of_washington | pine | — | — |
| university_of_washington | pine | — | — |
| university_of_washington | pine | — | — |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-jmm6-4qwp-jx6x: URL-handling code in Pine 4
ghsa_unreviewed·2022-04-30
CVE-2002-0014 [HIGH] GHSA-jmm6-4qwp-jx6x: URL-handling code in Pine 4
URL-handling code in Pine 4.43 and earlier allows remote attackers to execute arbitrary commands via a URL enclosed in single quotes and containing shell metacharacters (&).
Red Hat
security flaw
vendor_redhat·2002-01-05·CVSS 7.5
CVE-2002-0014 [HIGH] security flaw
security flaw
URL-handling code in Pine 4.43 and earlier allows remote attackers to execute arbitrary commands via a URL enclosed in single quotes and containing shell metacharacters (&).
No detection rules found.
No public exploits indexed.
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000460http://marc.info/?l=bugtraq&m=101027841605918&w=2http://rhn.redhat.com/errata/RHSA-2002-009.htmlhttp://www.securityfocus.com/bid/3815http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0201-015http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000460http://marc.info/?l=bugtraq&m=101027841605918&w=2http://rhn.redhat.com/errata/RHSA-2002-009.htmlhttp://www.securityfocus.com/bid/3815http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0201-015
2002-07-26
Published