University of Washington Pine 3.98/4.0/4.2/4.10 Lynx URL index.html privileges management

Summaryinfo

A vulnerability was found in University of Washington Pine 3.98/4.0/4.2/4.10. It has been rated as critical. Affected by this vulnerability is an unknown functionality of the file index.html of the component Lynx URL Handler. This manipulation causes privileges management. This vulnerability is tracked as CVE-2000-0353. No exploit exists. Upgrading the affected component is advised.

Detailsinfo

A vulnerability classified as very critical was found in University of Washington Pine 3.98/4.0/4.2/4.10. Affected by this vulnerability is an unknown function of the file index.html of the component Lynx URL Handler. The manipulation with an unknown input leads to a privileges management vulnerability. The CWE definition for the vulnerability is CWE-269. The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

Pine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains a uudecoded file from a malicious web server, which is then executed by Pine.

The weakness was disclosed 06/28/1999 (Website). It is possible to read the advisory at securiteam.com. This vulnerability is known as CVE-2000-0353. The exploitation appears to be easy. The attack can be launched remotely. The exploitation doesn't need any form of authentication. Technical details of the vulnerability are known, but there is no available exploit. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 05/21/2018). The attack technique deployed by this issue is T1068 according to MITRE ATT&CK.

By approaching the search of inurl:index.html it is possible to find vulnerable targets with Google Hacking.

Upgrading eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at SecurityFocus (BID 1247†). Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• University of Washington

Name

• Pine

Version

• 3.98
• 4.0
• 4.2
• 4.10

License

• free

Website

• Vendor: https://www.washington.edu/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion