PT-2000-1842 · Pegasus · Pegasus Mail

Published 2000-12-19 · Updated 2017-10-10 · CVE-2000-0930

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Pegasus Mail version 3.12

Description The issue allows remote attackers to read arbitrary files. This is achieved by using an embedded URL that calls the mailto: protocol with a -F switch.

Recommendations For Pegasus Mail version 3.12, consider disabling the mailto: protocol or restricting its use until a patch is available. Avoid using the -F switch in the mailto: protocol to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2000-0930

Affected Products

Pegasus Mail

References · 6

• 🔥 https://exploit-db.com/exploits/20249 · Exploit
• 🔥 http://securityfocus.com/bid/1738 · Exploit
• http://archives.neohapsis.com/archives/bugtraq/2000-10/0436.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2000-0930 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2000-10/0039.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5326 · Note