CVE-1999-1187

Description

Pine before version 3.94 allows local users to gain privileges via a symlink attack on a lockfile that is created when a user receives new mail.

Affected products

• FreeBSD / FreeBSD2.1.0 – 2.1.0
• slackware / slackware_linux3.0 – 3.0
• university_of_washington / pine3.94

References

• MAILING_LISThttp://marc.info/?l=bugtraq&m=87602167419803&w=2
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/416