[SECURITY] [DSA 1077-1] New lynx-ssl packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1077-1 [email protected] http://www.debian.org/security/ Martin Schulze May 26th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1077-1] New lynx-ssl packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1077-1 [email protected] http://www.debian.org/security/ Martin Schulze May 26th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1076-1] New lynx packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1076-1 [email protected] http://www.debian.org/security/ Martin Schulze May 26th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1076-1] New lynx packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1076-1 [email protected] http://www.debian.org/security/ Martin Schulze May 26th, 2006 http://www.debian.org/security/faq -...

DSA-1077-1 lynx-ssl - programming error

Bulletin has no description...

DSA-1076-1 lynx - programming error

Bulletin has no description...

FreeBSD : lynx -- remote buffer overflow (c01170bf-4990-11da-a1b8-000854d03344)

Ulf Harnhammar reports : When Lynx connects to an NNTP server to fetch information about the available articles in a newsgroup, it will call a function called HTrjis with the information from certain article headers. The function adds missing ESC characters to certain data, to support Asian...

Mandrake Linux Security Advisory : lynx (MDKSA-2005:211)

An arbitrary command execution vulnerability was discovered in the lynx 'lynxcgi:' URI handler. An attacker could create a web page that redirects to a malicious URL which could then execute arbitrary code as the user running lynx. The updated packages have been patched to address this issue...

Ubuntu 4.10 / 5.04 / 5.10 : lynx vulnerability (USN-206-1)

Ulf Harnhammar discovered a remote vulnerability in Lynx when connecting to a news server NNTP. The function that added missing escape chararacters to article headers did not check the size of the target buffer. Specially crafted news entries could trigger a buffer overflow, which could be...

Ubuntu 4.10 / 5.04 / 5.10 : lynx regression fix (USN-206-2)

USN-206-1 fixed a security vulnerability in lynx. Unfortunately the fix contained an error that caused lynx to crash under certain circumstances. The updated packages fix this. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security...

CVE-2005-2929

The CVE-2005-2929 entry applies to Lynx 2.8.5 and earlier (pre-2.8.6dev.15). It describes remote command execution via lynxcgi:, lynxexec, and lynxprog links that are not properly restricted in default configurations in some environments, allowing an attacker to run arbitrary commands. Connected ...

CVE-2005-2929

Lynx 2.8.5, and other versions before 2.8.6dev.15, allows remote attackers to execute arbitrary commands via 1 lynxcgi:, 2 lynxexec, and 3 lynxprog links, which are not properly restricted in the default configuration in some environments...

CVE-2005-2929

Lynx 2.8.5, and other versions before 2.8.6dev.15, allows remote attackers to execute arbitrary commands via 1 lynxcgi:, 2 lynxexec, and 3 lynxprog links, which are not properly restricted in the default configuration in some environments...

CVE-2005-2929

Lynx 2.8.5, and other versions before 2.8.6dev.15, allows remote attackers to execute arbitrary commands via 1 lynxcgi:, 2 lynxexec, and 3 lynxprog links, which are not properly restricted in the default configuration in some environments...

CVE-2005-2929

Lynx 2.8.5, and other versions before 2.8.6dev.15, allows remote attackers to execute arbitrary commands via 1 lynxcgi:, 2 lynxexec, and 3 lynxprog links, which are not properly restricted in the default configuration in some environments...

CVE-2005-2929: Undefined Security Weakness

Lynx 2.8.5, and other versions before 2.8.6dev.15, allows remote attackers to execute arbitrary commands via 1 lynxcgi:, 2 lynxexec, and 3 lynxprog links, which are not properly restricted in the default configuration in some environments...

Fedora Core 3 : lynx-2.8.5-18.0.2 (2005-1078)

This update fixes CVE-2005-2929 lynxcgi: URLs. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

RHEL 2.1 / 3 / 4 : lynx (RHSA-2005:839)

An updated lynx package that corrects a security flaw is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Lynx is a text-based Web browser. An arbitrary command execute bug was found in the lynx 'lynxcgi:' URI handler. An attacker...

Fedora Core 4 : lynx-2.8.5-23.2 (2005-1079)

This update fixes CVE-2005-2929 lynxcgi: URLs. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

GLSA-200511-09 : Lynx: Arbitrary command execution

The remote host is affected by the vulnerability described in GLSA-200511-09 Lynx: Arbitrary command execution iDefense labs discovered a problem within the feature to execute local cgi-bin programs via the 'lynxcgi:' URI handler. Due to a configuration error, the default settings allow websites ...