CVE-2001-0736
Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local...
CVE-2001-0736 is a low vulnerability (CVSS 2.1) in University Of Washington Pine, published October 12, 2001. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.81%, the 57th percentile. No source names a fixed version.
- Severity
- 2.1 LowCVSS 2.0, NVD
- Exploit chance
- 0.81%EPSS, 57th percentile
- Exploitation
- None known1 public exploit
- Fixed in
- No fix listedNo source names one
Description
Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local users to overwrite arbitrary files via a symlink attack.
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | University of Washington Pico 3.x/4.x - File Overwrite | 2000-12-11 |
What each source reports
NVD Score used
Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local users to overwrite arbitrary files via a symlink attack.
- Record
CVE-2001-0736- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE ListNo score
Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local users to overwrite arbitrary files via a symlink attack.
- Record
CVE-2001-0736- Updated
- 2026-11-02
EUVDEUVD-2001-0721No score
Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local users to overwrite arbitrary files via a symlink attack.
- Record
EUVD-2001-0721- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xqxf-jjq4-grw6No score
Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local...
Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local users to overwrite arbitrary files via a symlink attack.
- Record
GHSA-xqxf-jjq4-grw6- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
marc.info?l=bugtraq&m=98749102621604&w=2
linux-mandrake.com/en/security/2001/MDKSA-2001-047.php3?dis=8.0
redhat.com/support/errata/RHSA-2001-042.html
exchange.xforce.ibmcloud.com/vulnerabilities/6367
nvd.nist.gov/vuln/detail/CVE-2001-0736
github.com/advisories/GHSA-xqxf-jjq4-grw6