Lucene search

K
centosCentOS ProjectCESA-2005:839-01
HistoryNov 13, 2005 - 10:59 p.m.

lynx security update

2005-11-1322:59:14
CentOS Project
lists.centos.org
43

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.018 Low

EPSS

Percentile

88.2%

CentOS Errata and Security Advisory CESA-2005:839-01

Lynx is a text-based Web browser.

An arbitrary command execute bug was found in the lynx “lynxcgi:” URI
handler. An attacker could create a web page redirecting to a malicious URL
which could execute arbitrary code as the user running lynx. The Common
Vulnerabilities and Exposures project assigned the name CVE-2005-2929 to
this issue.

Users should update to this erratum package, which contains a backported
patch to correct this issue.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2005-November/074579.html

Affected packages:
lynx

OSVersionArchitecturePackageVersionFilename
CentOS2i386lynx< 2.8.4-18.1.2lynx-2.8.4-18.1.2.i386.rpm

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.018 Low

EPSS

Percentile

88.2%