CVE-1999-1549

Lynx 2.x does not properly distinguish between internal and external HTML, which may allow a local attacker to read a "secure" hidden form value from a temporary file and craft a LYNXOPTIONS: URL that causes Lynx to modify the user's configuration file and execute commands...

PT-1999-1782 · Lynx · Lynx

Name of the Vulnerable Software and Affected Versions: Lynx versions 2.x Description: The issue arises from Lynx not properly distinguishing between internal and external HTML. This may allow a local attacker to read a "secure" hidden form value from a temporary file and craft a LYNXOPTIONS: URL...

CVE-1999-0371

CVE-1999-0371 impacts Lynx: a local user can overwrite sensitive files via /tmp symlinks. The issue is a local-auth, race/symlink-related flaw in Lynx’s handling of /tmp, with a low base score (CVSSv2 1.2) and partial confidentiality impact. No exploit details are provided in the connected docume...

CVE-1999-0371

Lynx allows a local user to overwrite sensitive files through /tmp symlinks...

lynx.2.8.2.extern.txt

-----BEGIN PGP SIGNED MESSAGE----- SuSE Security Announcement Package: lynx-2.8.2 and older Date: Thu Sep 16 21:29:15 CEST 1999 Affected: all Linux distributions using lynx-2.8.2 and older A security hole was discovered in the package mentioned above. Please update as soon as possible or disable...

CVE-1999-0817

Lynx WWW client allows a remote attacker to specify command-line parameters which Lynx uses when calling external programs to handle certain protocols, e.g. telnet...

PT-1999-1371 · Lynx · Lynx

Name of the Vulnerable Software and Affected Versions: Lynx WWW client affected versions not specified Description: The issue allows a remote attacker to specify command-line parameters that Lynx uses when calling external programs to handle certain protocols, such as telnet. Recommendations: At...

lynx-2.8.x-BOF.txt

Date: Sun, 6 Sep 1998 00:53:24 +0200 From: Michal Zalewski To: [email protected] Subject: Sendmail, lynx, Netscape, sshd, Linux kernel twice Bugs in lynx 2.8.x including latest development versions: ----------------------------------------------------------- Trivial overflows in protocol...

lynxtmp.txt

Date: Tue, 9 Feb 1999 20:57:30 -0500 From: Juan Diego Bolanos To: [email protected] Subject: Lynx /tmp problem Hi Aleph, please filter this if already posted.... ------ Hello.... I have found a bug in Lynx all versions, except the latest stable release... lynx create temporary files in /tmp in...

CVE-1999-0371

Lynx allows a local user to overwrite sensitive files through /tmp symlinks...

PT-1999-1058 · Lynx · Lynx

Name of the Vulnerable Software and Affected Versions: Lynx affected versions not specified Description: The issue allows a local user to overwrite sensitive files through /tmp symlinks, potentially leading to security breaches. Recommendations: At the moment, there is no information about a newe...

CVE-1999-0465

Remote attackers can crash Lynx and Internet Explorer using an IMG tag with a large width parameter...

PT-1999-1146 · Lynx +1 · Lynx +1

Name of the Vulnerable Software and Affected Versions: Lynx affected versions not specified Internet Explorer affected versions not specified Description: The issue allows remote attackers to crash the browser using an IMG tag with a large width parameter. Recommendations: For Lynx, at the moment...

Lynx 2.8 - Remote Buffer Overflow

Lynx 2.8 - Remote Buffer Overflow source: https://www.securityfocus.com/bid/100/info There exists a buffer overflow in Lynx's built-in mailer that can be exploited when when the victim tries to follow a hyperlink. Lynx makes blind assumption on e-mail address length, and sprintfs it into 512-byte...

Lynx 2.8 - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/100/info There exists a buffer overflow in Lynx's built-in mailer that can be exploited when when the victim tries to follow a hyperlink. Lynx makes blind assumption on e-mail address length, and sprintfs it into 512-bytes long buffer. The vulnerability i...

PT-2004-3700 · Lynx +2 · Lynx +2

Name of the Vulnerable Software and Affected Versions: Lynx versions 2.8.6 and earlier Description: The issue is related to multiple vulnerabilities in the Lynx package, which can lead to a breach of confidentiality, integrity, and availability of protected information. These vulnerabilities can ...