CVE-2003-0720

Description

Buffer overflow in PINE before 4.58 allows remote attackers to execute arbitrary code via a malformed message/external-body MIME type.

Affected products

• university_of_washington / pine3.98 – 3.98
• university_of_washington / pine4.0.2 – 4.0.2
• university_of_washington / pine4.0.4 – 4.0.4
• university_of_washington / pine4.10 – 4.10
• university_of_washington / pine4.20 – 4.20
• university_of_washington / pine4.21 – 4.21
• university_of_washington / pine4.30 – 4.30
• university_of_washington / pine4.33 – 4.33
• university_of_washington / pine4.44 – 4.44
• university_of_washington / pine4.50 – 4.50
• university_of_washington / pine4.52 – 4.52
• university_of_washington / pine4.53 – 4.53
• university_of_washington / pine4.56 – 4.56

Exploits & proofs of concept

• exploit-dbPine 4.56 - Remote Buffer Overflowby sorbo

References

• MISChttp://www.redhat.com/support/errata/RHSA-2003-274.html
• MISChttp://archives.neohapsis.com/archives/vulnwatch/2003-q3/0099.html
• MAILING_LISThttp://marc.info/?l=bugtraq&m=106329356702508&w=2
• MISChttp://www.redhat.com/support/errata/RHSA-2003-273.html
• MISChttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A499
• MISChttp://www.idefense.com/advisory/09.10.03.txt
• MAILING_LISThttp://marc.info/?l=bugtraq&m=106322571805153&w=2