RHEL 2.1 : pine (RHSA-2002:271)

medium Nessus Plugin ID 12338

Synopsis

The remote Red Hat host is missing a security update.

Description

A vulnerability in Pine version 4.44 and earlier releases can cause Pine to crash when sent a carefully crafted email.

[Updated 06 Feb 2003] Added fixed packages for Advanced Workstation 2.1

Pine, developed at the University of Washington, is a tool for reading, sending, and managing electronic messages (including mail and news).

A security problem was found in versions of Pine 4.44 and earlier. In these verions, Pine does not allocate enough memory for the parsing and escaping of the 'From' header, allowing a carefully crafted email to cause a buffer overflow on the heap. This will result in Pine crashing.

All users of Pine on Red Hat Linux Advanced Server are advised to update to these errata packages containing a patch to version 4.44 of Pine that fixes this vulnerability.

Solution

Update the affected pine package.

Plugin Details

Severity: Medium

ID: 12338

File Name: redhat-RHSA-2002-271.nasl

Version: 1.25

Type: local

Agent: unix

Family: Red Hat Local Security Checks

Published: 7/6/2004

Updated: 1/14/2021

Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 4.4

CVSS v2

Risk Factor: Medium

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Information

CPE: cpe:/o:redhat:enterprise_linux:2.1, p-cpe:/a:redhat:enterprise_linux:pine

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu

Patch Publication Date: 2/5/2003

Vulnerability Publication Date: 12/11/2002

Reference Information

CVE: CVE-2002-1320

RHSA: 2002:271

Detections

Analytics