CVE-2000-0352: University Of Washington Pine

High severity, CVSS 10.0. EPSS: 3.5% chance of exploitation in the next 30 days.

Pine before version 4.21 does not properly filter shell metacharacters from URLs, which allows remote attackers to execute arbitrary commands via a malformed URL.

Affected products

• University Of Washington Pine: version 4.20 only; version 4.21 only

Published 1999-11-18. Last modified 2026-06-16.