CVE-2000-0352

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 1999-11-18 · updated 2026-06-16

Description

Pine before version 4.21 does not properly filter shell metacharacters from URLs, which allows remote attackers to execute arbitrary commands via a malformed URL.

Affected products

University Of Washington Pine: 4.20, 4.21

References

http://www.novell.com/linux/security/advisories/suse_security_announce_36.html
http://www.securityfocus.com/bid/810
http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.9911171818220.12375-100000%40ray.compu-aid.com
http://www.novell.com/linux/security/advisories/suse_security_announce_36.html
http://www.securityfocus.com/bid/810
http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.9911171818220.12375-100000%40ray.compu-aid.com

Get alerted when CVE-2000-0352 or the next vulnerability affects your stack