CVE-1999-1187

Pine < 3.94 - Privilege Escalation via Symlink Attack on Lockfile

Title source: llm
STIX 2.1

Description

Pine before version 3.94 allows local users to gain privileges via a symlink attack on a lockfile that is created when a user receives new mail.

References (2)

Core 2
Core References
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=87602167419803&w=2
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/416

Scores

EPSS 0.0007
EPSS Percentile 22.0%

Details

Status published
Products (3)
freebsd/freebsd 2.1.0
slackware/slackware_linux 3.0
university_of_washington/pine < 3.94
Published Aug 26, 1996
Tracked Since Feb 18, 2026