CVE-2000-0930

CVE-2000-0930

Medium · published December 19, 2000

CVSS v2.0

5.0

EPSS

8%

Percentile

94.5

In the wild

Unconfirmed

What it is

Pegasus Mail 3.12 allows remote attackers to read arbitrary files via an embedded URL that calls the mailto: protocol with a -F switch.

The record

Technical detail

CVSS v2.0: 5.0 · MEDIUM
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.07653 · 94.5th percentile
Published: 2000-12-19T10:00Z

Affected products (1)

Product	Versions	Fixed in
david_harris/pegasus_mail	all versions	—

References (8)

http://archives.neohapsis.com/archives/bugtraq/2000-10/0039.html · [email protected]http://archives.neohapsis.com/archives/bugtraq/2000-10/0436.html · [email protected]http://www.securityfocus.com/bid/1738 · [email protected]https://exchange.xforce.ibmcloud.com/vulnerabilities/5326 · [email protected]http://archives.neohapsis.com/archives/bugtraq/2000-10/0039.html · af854a3a-2127-422b-91ae-364da2661108 http://archives.neohapsis.com/archives/bugtraq/2000-10/0436.html · af854a3a-2127-422b-91ae-364da2661108 http://www.securityfocus.com/bid/1738 · af854a3a-2127-422b-91ae-364da2661108 https://exchange.xforce.ibmcloud.com/vulnerabilities/5326 · af854a3a-2127-422b-91ae-364da2661108

EPSS history

Timeline

22 JAN 05:00Z
Pegasus Mail 3.12 allows remote attackers to read arbitrary files via an embedded URL that calls the mailto: protocol with a -F switch
cvelistv5