[Full-disclosure] iDefense Security Advisory 11.11.05: Multiple Vendor Lynx Command Injection Vulnerability

Multiple Vendor Lynx Command Injection Vulnerability iDefense Security Advisory 11.11.05 www.idefense.com/application/poi/display?id=338&type=vulnerabilities November 11, 2005 I. BACKGROUND Lynx is a fully-featured WWW client for users running cursor- addressable, character-cell display devices...

Lynx 2.8.6dev.13 - Remote Buffer Overflow

Lynx 2.8.6dev.13 - Remote Buffer Overflow !/usr/bin/perl -- lynx-nntp-server by Ulf Harnhammar in 2005 I hereby place this program in the public domain. edited by xwings in 1st Nov 2005 , xwings at xwings.net For all my friends in mantis @ ptp 14:21 xwings 14:21 wanna fuck 14:21 mark: sure 14:21...

Lynx <= 2.8.6dev.13 Remote Buffer Overflow Exploit (port bind)

No description provided by source. !/usr/bin/perl -- lynx-nntp-server by Ulf Harnhammar in 2005 I hereby place this program in the public domain. edited by xwings in 1st Nov 2005 , xwings at xwings.net For all my friends in mantis @ ptp 14:21 mark xwings 14:21 mark wanna fuck 14:21 xwings mark:...

Lynx <= 2.8.6dev.13 Remote Buffer Overflow Exploit (port bind)

Exploit for linux platform in category remote exploits ============================================================== Lynx xwings 14:21 wanna fuck 14:21 mark: sure 14:21 sweet 14:21 mark gets his lingerie Why lynx ? I guess ... I am bored ... :p Metasploit Port Bind Shellcode , Port : 3964...

USN-206-2: Fixed lynx packages for USN-206-1

USN-206-1 fixed a security vulnerability in lynx. Unfortunately the fix contained an error that caused lynx to crash under certain circumstances. The updated packages fix this...

[SECURITY] [DSA 876-1] New lynx-ssl packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 876-1 [email protected] http://www.debian.org/security/ Martin Schulze October 27th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 874-1] New lynx packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 874-1 [email protected] http://www.debian.org/security/ Martin Schulze October 27th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 874-1] New lynx packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 874-1 [email protected] http://www.debian.org/security/ Martin Schulze October 27th, 2005 http://www.debian.org/security/faq -...

DSA-874-1 lynx - buffer overflow

Bulletin has no description...

DSA-876-1 lynx-ssl - buffer overflow

Bulletin has no description...

Fedora Core 4 : lynx-2.8.5-23.1 (2005-994)

This package fixes a security bug CVE-2005-3120 when handling connections to NNTP news servers. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possib...

RHEL 4 : lynx (RHSA-2005:803)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:803 advisory. - CAN-2005-3120 lynx buffer overflow CVE-2005-3120 Note that Nessus has not tested for this issue but has instead relied only on the application's...

Fedora Core 3 : lynx-2.8.5-18.0.1 (2005-993)

This package fixes a security bug CVE-2005-3120 when handling connections to NNTP news servers. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possib...

lynx text mode web browser buffer overflow

Buffer overflow on NNTP server reply parsing...

Mandrake Linux Security Advisory : lynx (MDKSA-2005:186-1)

Ulf Harnhammar discovered a remote buffer overflow in lynx versions 2.8.2 through 2.8.5. When Lynx connects to an NNTP server to fetch information about the available articles in a newsgroup, it will call a function called HTrjis with the information from certain article headers. The function add...

[USN-206-1] Lynx vulnerability

=========================================================== Ubuntu Security Notice USN-206-1 October 17, 2005 lynx vulnerability CAN-2005-3120 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 4.10 Warty Warthog Ubuntu 5.04...

GLSA-200510-15 : Lynx: Buffer overflow in NNTP processing

The remote host is affected by the vulnerability described in GLSA-200510-15 Lynx: Buffer overflow in NNTP processing When accessing a NNTP URL, Lynx connects to a NNTP server and retrieves information about the available articles in the target newsgroup. Ulf Harnhammar discovered a buffer overfl...

lynx security update

CentOS Errata and Security Advisory CESA-2005:803-01 An updated lynx package that corrects a security flaw is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Lynx is a text-based Web browser. Ulf Härnhammar discovered a stack...

DEBIAN-CVE-2005-3120

Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape ESC characters...

CVE-2005-3120

Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape ESC characters...