VULNERABILITY INTELLIGENCE

CVE-1999-1187

CVSS score4.6 NONE
EPSS probability0.31%
CISA KEVNot currently listed
Published1996-08-26
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:P

Description

Pine before version 3.94 allows local users to gain privileges via a symlink attack on a lockfile that is created when a user receives new mail.

Weakness classification

  • nvd@nist.gov: NVD-CWE-Other

Primary references