Title: Pine Environment Variable URL Shell Interpreting Vulnerability
Severity: HIGH
Description:
Pine is a freely available, open source email client. It is distributed and maintained by Washington University.
A problem with Pine has been discovered that could make it possible to execute arbitrary commands. The problem is in the handling of URLs with encapsulated environment variables.
Pine supports configuration options that can integrate other programs, such as web browsers, with the email client. This can allow users of the email client to visit URLs by simply following the link.
The problem is in the handling of URLs with environment variables in them. An email sent to a user with an encoded environment variable and command in the URL could be used to execute the encoded command with the privileges of the user receiving the mail. This could make it possible to perform one of any number of commands as the user receiving the mail. This vulnerability is only present in email clients that have had a URL handler configured.
This problem makes it possible for a remote user to gain elevated privileges, including potentially administrative access.
Affected Products:
- Conectiva Linux 5.0.0
- Conectiva Linux 5.1.0
- Conectiva Linux 6.0.0
- Conectiva Linux 7.0.0
- Conectiva Linux ecommerce
- Conectiva Linux graficas
- HP Secure OS software for Linux 1.0.0
- RedHat Linux 6.2.0 alpha
- RedHat Linux 6.2.0 i386
- RedHat Linux 6.2.0 sparc
- RedHat Linux 7.0.0 alpha
- RedHat Linux 7.0.0 i386
- RedHat Linux 7.1.0 alpha
- RedHat Linux 7.1.0 i386
- RedHat Linux 7.1.0 ia64
- RedHat Linux 7.2.0 i386
- RedHat Linux 7.2.0 ia64
- S.u.S.E. Linux 7.1.0
- S.u.S.E. Linux 7.1.0 alpha
- S.u.S.E. Linux 7.1.0 ppc
- S.u.S.E. Linux 7.1.0 sparc
- S.u.S.E. Linux 7.2.0
- S.u.S.E. Linux 7.2.0 i386
- S.u.S.E. Linux 7.3.0
- S.u.S.E. Linux 7.3.0 i386
- S.u.S.E. Linux 7.3.0 ppc
- S.u.S.E. Linux 7.3.0 sparc
- Slackware Linux 7.0.0
- Slackware Linux 7.1.0
- Turbolinux Turbolinux Workstation 6.0.0
- University of Washington Pine 4.20.0
- University of Washington Pine 4.21.0
- University of Washington Pine 4.30.0
- University of Washington Pine 4.33.0
Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.
