Pine v4.30 and below allows outgoing mail to be hijacked if the alternate editor is enabled. Exploit script included.