CVE-2002-1903 — OF Washington Pine vulnerability

6 documents6 sources
Severity
5.0MEDIUMNVD
EPSS
0.8%
top 26.63%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
University OF Washington Pine
Timeline
PublishedDec 31
Latest updateApr 30

Description

Pine 4.2.1 through 4.4.4 puts Unix usernames and/or uid into Sender: and X-Sender: headers, which could allow remote attackers to obtain sensitive information.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

Patches

Patch: www.iss.net ↗Patch: www.securityfocus.com ↗Patch: www.iss.net ↗

🔴Vulnerability Details

2
GHSA
GHSA-mr5f-r5qw-mrjr: Pine 4↗2022-04-30
▶
CVEList
CVE-2002-1903: Pine 4↗2005-06-28
▶

📋Vendor Advisories

2
Red Hat
pine username disclosure issue↗2002-06-07
▶
Debian
CVE-2002-1903: alpine - Pine 4.2.1 through 4.4.4 puts Unix usernames and/or uid into Sender: and X-Sende...↗2002
▶

💬Community

1
Bugzilla
CVE-2002-1903 pine username disclosure issue↗2005-07-11
▶
CVE-2002-1903 — OF Washington Pine vulnerability | cvebase