Pine before version 3.94 allows local users to gain privileges via a symlink attack on a lockfile that is created when a user receives new mail.
| Software | From | Fixed in |
|---|---|---|
| university_of_washington / pine | - | 3.94.x |
| slackware / slackware_linux | 3.0 | 3.0.x |
| freebsd / freebsd | 2.1.0 | 2.1.0.x |