VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Dec 31, 2002· Updated Apr 16, 2026

CVE-2002-1903

CVE-2002-1903

Description

Pine 4.2.1 through 4.4.4 puts Unix usernames and/or uid into Sender: and X-Sender: headers, which could allow remote attackers to obtain sensitive information.

Affected products

4
  • University of Washington/Pine4 versions
    cpe:2.3:a:university_of_washington:pine:4.21:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:university_of_washington:pine:4.21:*:*:*:*:*:*:*
    • cpe:2.3:a:university_of_washington:pine:4.30:*:*:*:*:*:*:*
    • cpe:2.3:a:university_of_washington:pine:4.33:*:*:*:*:*:*:*
    • cpe:2.3:a:university_of_washington:pine:4.44:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.