FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2003-0720

This CVE name corresponds to:

Entered Topic
2004-02-12 pine remotely exploitable vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

Details

Type Candidate
Name CVE-2003-0720
Phase Assigned(20030902)

Description

Buffer overflow in PINE before 4.58 allows remote attackers to execute arbitrary code via a malformed message/external-body MIME type.

References

Source Reference
BUGTRAQ 20030910 iDEFENSE Security Advisory 09.10.03: Two Exploitable Overflows in PINE
VULNWATCH 20030910 iDEFENSE Security Advisory 09.10.03: Two Exploitable Overflows in PINE
MISC http://www.idefense.com/advisory/09.10.03.txt
REDHAT RHSA-2003:273
REDHAT RHSA-2003:274
SUSE SuSE-SA:2003:037
ENGARDE ESA-20030911-022
BUGTRAQ 20030911 [slackware-security] security issues in pine (SSA:2003-253-01)
OVAL oval:org.mitre.oval:def:499