CVE-2000-0352
https://notcve.org/view.php?id=CVE-2000-0352
Pine before version 4.21 does not properly filter shell metacharacters from URLs, which allows remote attackers to execute arbitrary commands via a malformed URL. • ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-036.0.txt http://www.novell.com/linux/security/advisories/suse_security_announce_36.html http://www.securityfocus.com/bid/810 http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.9911171818220.12375-100000%40ray.compu-aid.com •
CVE-2000-0353
https://notcve.org/view.php?id=CVE-2000-0353
Pine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains a uudecoded file from a malicious web server, which is then executed by Pine. • http://www.novell.com/linux/security/advisories/pine_update_announcement.html http://www.novell.com/linux/security/advisories/suse_security_announce_6.html http://www.securiteam.com/unixfocus/HHP-Pine_remote_exploit.html http://www.securityfocus.com/bid/1247 •
CVE-1999-0920 – University of Washington pop2d 4.4 - Remote Buffer Overflow
https://notcve.org/view.php?id=CVE-1999-0920
Buffer overflow in the pop-2d POP daemon in the IMAP package allows remote attackers to gain privileges via the FOLD command. • https://www.exploit-db.com/exploits/19226 http://www.securityfocus.com/bid/283 •
CVE-1999-0005 – Netscape Messaging Server 3.55 & University of Washington imapd 10.234 - Remote Buffer Overflow
https://notcve.org/view.php?id=CVE-1999-0005
Arbitrary command execution via IMAP buffer overflow in authenticate command. • https://www.exploit-db.com/exploits/19107 http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/177 http://www.securityfocus.com/bid/130 •
CVE-1999-0004
https://notcve.org/view.php?id=CVE-1999-0004
MIME buffer overflow in email clients, e.g. Solaris mailtool and Outlook. Desbordamiento de buffer en clientes de correo, como Solaris mailtool y Outlook • https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-008 •