(RHSA-2005:803) lynx security update

2005-10-17T04:00:00
ID RHSA-2005:803
Type redhat
Reporter RedHat
Modified 2018-03-14T19:27:14

Description

Lynx is a text-based Web browser.

Ulf Harnhammar discovered a stack overflow bug in Lynx when handling connections to NNTP (news) servers. An attacker could create a web page redirecting to a malicious news server which could execute arbitrary code as the user running lynx. The Common Vulnerabilities and Exposures project assigned the name CAN-2005-3120 to this issue.

Users should update to this erratum package, which contains a backported patch to correct this issue.