875 matches found
DSA-1076-1 lynx - programming error
Bulletin has no description...
FreeBSD : lynx -- remote buffer overflow (c01170bf-4990-11da-a1b8-000854d03344)
Ulf Harnhammar reports : When Lynx connects to an NNTP server to fetch information about the available articles in a newsgroup, it will call a function called HTrjis with the information from certain article headers. The function adds missing ESC characters to certain data, to support Asian...
Ubuntu 4.10 / 5.04 / 5.10 : lynx regression fix (USN-206-2)
USN-206-1 fixed a security vulnerability in lynx. Unfortunately the fix contained an error that caused lynx to crash under certain circumstances. The updated packages fix this. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security...
Mandrake Linux Security Advisory : lynx (MDKSA-2005:211)
An arbitrary command execution vulnerability was discovered in the lynx 'lynxcgi:' URI handler. An attacker could create a web page that redirects to a malicious URL which could then execute arbitrary code as the user running lynx. The updated packages have been patched to address this issue...
Ubuntu 4.10 / 5.04 / 5.10 : lynx vulnerability (USN-206-1)
Ulf Harnhammar discovered a remote vulnerability in Lynx when connecting to a news server NNTP. The function that added missing escape chararacters to article headers did not check the size of the target buffer. Specially crafted news entries could trigger a buffer overflow, which could be...
CVE-2005-2929
The CVE-2005-2929 entry applies to Lynx 2.8.5 and earlier (pre-2.8.6dev.15). It describes remote command execution via lynxcgi:, lynxexec, and lynxprog links that are not properly restricted in default configurations in some environments, allowing an attacker to run arbitrary commands. Connected ...
CVE-2005-2929
Lynx 2.8.5, and other versions before 2.8.6dev.15, allows remote attackers to execute arbitrary commands via 1 lynxcgi:, 2 lynxexec, and 3 lynxprog links, which are not properly restricted in the default configuration in some environments...
CVE-2005-2929
Lynx 2.8.5, and other versions before 2.8.6dev.15, allows remote attackers to execute arbitrary commands via 1 lynxcgi:, 2 lynxexec, and 3 lynxprog links, which are not properly restricted in the default configuration in some environments...
CVE-2005-2929
Lynx 2.8.5, and other versions before 2.8.6dev.15, allows remote attackers to execute arbitrary commands via 1 lynxcgi:, 2 lynxexec, and 3 lynxprog links, which are not properly restricted in the default configuration in some environments...
CVE-2005-2929
Lynx 2.8.5, and other versions before 2.8.6dev.15, allows remote attackers to execute arbitrary commands via 1 lynxcgi:, 2 lynxexec, and 3 lynxprog links, which are not properly restricted in the default configuration in some environments...
RHEL 2.1 / 3 / 4 : lynx (RHSA-2005:839)
An updated lynx package that corrects a security flaw is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Lynx is a text-based Web browser. An arbitrary command execute bug was found in the lynx 'lynxcgi:' URI handler. An attacker...
GLSA-200511-09 : Lynx: Arbitrary command execution
The remote host is affected by the vulnerability described in GLSA-200511-09 Lynx: Arbitrary command execution iDefense labs discovered a problem within the feature to execute local cgi-bin programs via the 'lynxcgi:' URI handler. Due to a configuration error, the default settings allow websites ...
Fedora Core 4 : lynx-2.8.5-23.2 (2005-1079)
This update fixes CVE-2005-2929 lynxcgi: URLs. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora Core 3 : lynx-2.8.5-18.0.2 (2005-1078)
This update fixes CVE-2005-2929 lynxcgi: URLs. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
lynx security update
CentOS Errata and Security Advisory CESA-2005:839-01 An updated lynx package that corrects a security flaw is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Lynx is a text-based Web browser. An arbitrary command execute bug was...
Lynx < 2.8.6 dev15 Arbitary Code Execution
Binary data 3287.prm...
lynx security update
CentOS Errata and Security Advisory CESA-2005:839 An updated lynx package that corrects a security flaw is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Lynx is a text-based Web browser. An arbitrary command execute bug was fou...
lynx arbitrary command execution
Lynx 2.8.5, and other versions before 2.8.6dev.15, allows remote attackers to execute arbitrary commands via 1 lynxcgi:, 2 lynxexec, and 3 lynxprog links, which are not properly restricted in the default configuration in some environments...
Critical: Red Hat Security Advisory: lynx security update
An updated lynx package that corrects a security flaw is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Lynx is a text-based Web browser. An arbitrary command execute bug was found in the lynx "lynxcgi:" URI handler. An attacker...
