CVE-1999-1187

CVE-1999-1187 describes a local privilege escalation vulnerability in Pine email client versions prior to 3.94, affecting various FreeBSD and Slackware Linux distributions. An attacker can exploit this by creating a symbolic link to a sensitive file, which Pine then overwrites when creating a lockfile for new mail. With a CVSS score of 4.6 (Medium), this vulnerability requires local access and low attack complexity, potentially leading to partial confidentiality, integrity, and availability compromise. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.