CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2002-1903

Pine 4.2.1 through 4.4.4 puts Unix usernames and/or uid into Sender: and X-Sender: headers, which could allow remote attackers to obtain sensitive information.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 59.2%

CVSS Severity

CVSS v2 Score 5.0

References

http://online.securityfocus.com/archive/1/276029
http://www.iss.net/security_center/static/9297.php
http://www.securityfocus.com/bid/4963
http://online.securityfocus.com/archive/1/276029
http://www.iss.net/security_center/static/9297.php
http://www.securityfocus.com/bid/4963

Products affected by CVE-2002-1903

University Of Washington » Pine » Version: 4.21

cpe:2.3:a:university_of_washington:pine:4.21
University Of Washington » Pine » Version: 4.30

cpe:2.3:a:university_of_washington:pine:4.30
University Of Washington » Pine » Version: 4.33

cpe:2.3:a:university_of_washington:pine:4.33
University Of Washington » Pine » Version: 4.44

cpe:2.3:a:university_of_washington:pine:4.44

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2002-1903

Products

Pricing

Contact Us