CVE-2005-3120

Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape ESC characters...

CVE-2005-3120

Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape ESC characters...

USN-206-1: Lynx vulnerability

Ulf Harnhammar discovered a remote vulnerability in Lynx when connecting to a news server NNTP. The function that added missing escape chararacters to article headers did not check the size of the target buffer. Specially crafted news entries could trigger a buffer overflow, which could be...

lynx security update

CentOS Errata and Security Advisory CESA-2005:803 An updated lynx package that corrects a security flaw is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Lynx is a text-based Web browser. Ulf Härnhammar discovered a stack overfl...

CAN-2005-3120 lynx buffer overflow

Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape ESC characters...

Critical: Red Hat Security Advisory: lynx security update

An updated lynx package that corrects a security flaw is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Lynx is a text-based Web browser. Ulf Härnhammar discovered a stack overflow bug in Lynx when handling connections to NNTP...

CVE-2005-3120

Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape ESC characters...

CVE-2005-3120

Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape ESC characters...

CVE-2005-3120

CVE-2005-3120 concerns Lynx, a text-mode web/browser, with a stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier. The overflow can be triggered when Lynx handles article headers containing Asian characters while connecting to an NNTP server, causing Lynx to write past a b...

Lynx: Buffer overflow in NNTP processing

Background Lynx is a text-mode browser for the World Wide Web. It supports multiple URL types, including HTTP and NNTP URLs. Description When accessing a NNTP URL, Lynx connects to a NNTP server and retrieves information about the available articles in the target newsgroup. Ulf Harnhammar...

Lynx < 2.8.6 dev14 NNTP Headers Buffer Overflow

Binary data 3261.prm...

Lynx 2.8.6dev.13 - Remote Buffer Overflow (PoC)

Lynx 2.8.6dev.13 - Remote Buffer Overflow PoC !/usr/bin/perl -- lynx-nntp-server by Ulf Harnhammar in 2005 I hereby place this program in the public domain. use strict; use IO::Socket; $main::port = 119; $main::timeout = 5; SUBROUTINES sub mysend$$ my $file = shift; my $str = shift; print $file...

Lynx 2.8.6dev.13 - Remote Buffer Overflow (PoC)

!/usr/bin/perl -- lynx-nntp-server by Ulf Harnhammar in 2005 I hereby place this program in the public domain. use strict; use IO::Socket; $main::port = 119; $main::timeout = 5; SUBROUTINES sub mysend$$ my $file = shift; my $str = shift; print $file "$str\n"; print "SENT: $str\n"; sub mysend sub...

lynx -- remote buffer overflow

Ulf Härnhammar reports: When Lynx connects to an NNTP server to fetch information about the available articles in a newsgroup, it will call a function called HTrjis with the information from certain article headers. The function adds missing ESC characters to certain data, to support Asian...

Lynx <= 2.8.6dev.13 Remote Buffer Overflow Exploit (PoC)

Exploit for multiple platform in category dos / poc ======================================================== Lynx ; alarm 0; ; if email protected eq "alarm\n" $inp = ''; print "TIMED OUT\n"; $inp = tr/\015\012\000//d; print "RECEIVED: $inp\n"; $inp; sub myreceive MAIN PROGRAM my $server =...

CVE-2004-1617

CVE-2004-1617 affects Lynx family (lynx, lynx-ssl, lynx-cur) prior to 2.8.6dev.8. Affected component is the HTML parser: processing invalid HTML (notably a TEXTAREA with a large COLS value, or an unterminated large tag name) can cause an infinite loop, i.e., a denial of service. Debians OpenVAS e...

CVE-2004-1617

Lynx, lynx-ssl, and lynx-cur before 2.8.6dev.8 allow remote attackers to cause a denial of service infinite loop via a web page or HTML email that contains invalid HTML including 1 a TEXTAREA tag with a large COLS value and 2 a large tag name in an element that is not terminated, as demonstrated ...

Lynx Malformed HTML Tags DoS

Binary data 2581.prm...

DEBIAN-CVE-2004-1617

Lynx, lynx-ssl, and lynx-cur before 2.8.6dev.8 allow remote attackers to cause a denial of service infinite loop via a web page or HTML email that contains invalid HTML including 1 a TEXTAREA tag with a large COLS value and 2 a large tag name in an element that is not terminated, as demonstrated ...

CVE-2004-1617

Lynx, lynx-ssl, and lynx-cur before 2.8.6dev.8 allow remote attackers to cause a denial of service infinite loop via a web page or HTML email that contains invalid HTML including 1 a TEXTAREA tag with a large COLS value and 2 a large tag name in an element that is not terminated, as demonstrated ...