Lynx 2.8 '.mailcap' and '.mime.type' Files Local Code Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/31917/info Lynx is prone to a local code-execution vulnerability. Successful exploits may allow attackers to execute arbitrary code within the context of the user running the affected application. Versions prior to Lynx...

Slackware Advisory SSA:2009-033-01 xdg-utils

The remote host is missing an update as announced via advisory SSA:2009-033-01. OpenVAS Vulnerability Test $Id: esoftslkssa200903301.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Mandriva Update for mailcap MDVA-2010:049 (mailcap)

Check for the Version of mailcap OpenVAS Vulnerability Test Mandriva Update for mailcap MDVA-2010:049 mailcap Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

MDVA-2010:049 : mailcap

It was discovered that the mailcap package needed by firefox wasn't provided with MDVA-2010:015. Packages for 2008.0 are provided for Corporate Desktop 2008.0 customers. This advisory addresses these problems. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patc...

CentOS Update for lynx CESA-2008:0965 centos3 x86_64

Check for the Version of lynx OpenVAS Vulnerability Test CentOS Update for lynx CESA-2008:0965 centos3 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

CentOS Update for lynx CESA-2008:0965 centos3 i386

Check for the Version of lynx OpenVAS Vulnerability Test CentOS Update for lynx CESA-2008:0965 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Slackware 12.2 / current : xdg-utils (SSA:2009-033-01)

New xdg-utils packages are available for Slackware 12.2 and -current to fix security issues. Applications that use /etc/mailcap could be tricked into running an arbitrary script through xdg-open, and a separate flaw in xdg-open could allow the execution of arbitrary commands embedded in untrusted...

xdg-utils

New xdg-utils packages are available for Slackware 12.2 and -current to fix security issues. Applications that use /etc/mailcap could be tricked into running an arbitrary script through xdg-open, and a separate flaw in xdg-open could allow the execution of arbitrary commands embedded in untrusted...

Mozilla Firefox xdg-open mailcap文件远程代码执行漏洞

BUGTRAQ ID: 33137 Firefox是一款开放源码的WEB浏览器。 Firefox在调用/etc/mailcap中所定义的xdg-open工具之前没有正确地验证文件的mime-type，这可能导致执行任意代码。 Firefox使用mailcap检测默认的关联应用程序，对于音频或PDF文件等mime类型，Firefox使用xdg-open为默认的应用程序。由于xdg-open本身会检测mime类型（或要求桌面管理器检测），嵌入了伪造mime-type的页面会导致执行恶意程序。 Mozilla Firefox 3.0.5 厂商补丁： Mozilla -------...

Lynx 2.8 - .mailcap.mime.type Local Code Execution

Lynx 2.8 - .mailcap.mime.type Local Code Execution source: https://www.securityfocus.com/bid/31917/info Lynx is prone to a local code-execution vulnerability. Successful exploits may allow attackers to execute arbitrary code within the context of the user running the affected application. Version...

Lynx 2.8 - '.mailcap'/'.mime.type' Local Code Execution

source: https://www.securityfocus.com/bid/31917/info Lynx is prone to a local code-execution vulnerability. Successful exploits may allow attackers to execute arbitrary code within the context of the user running the affected application. Versions prior to Lynx 2.8.6rel.4 are affected. .mime.type...

Lynx '.mailcap'和'.mime.type'文件本地代码执行漏洞

BUGTRAQ ID: 31917 CVE ID：CVE-2006-7234 CNCVE ID：CNCVE-20087234 Lynx是一款基于文本的浏览器。 Lynx处理'.mailcap'和'.mime.type'文件存在问题，本地攻击者可以利用漏洞以应用程序权限执行任意指令。 Lynx从当前目录中打开mailcap和mime类型定义文件，如果用户可以在特殊构建的目录中诱使用户运行lynx，攻击者可以控制目录以运行lynx用户权限执行任意代码。 University of Kansas Lynx 2.8.6 dev9 University of Kansas Lynx 2.8.6...

CVE-2006-7234

Untrusted search path vulnerability in Lynx before 2.8.6rel.4 allows local users to execute arbitrary code via malicious 1 .mailcap and 2 mime.types files in the current working directory...

Important: Red Hat Security Advisory: lynx security update

An updated lynx package that corrects two security issues is now available for Red Hat Enterprise Linux 2.1, 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Lynx is a text-based Web browser. An arbitrary command execution flaw was...

lynx: .mailcap and .mime.types files read from CWD

Untrusted search path vulnerability in Lynx before 2.8.6rel.4 allows local users to execute arbitrary code via malicious 1 .mailcap and 2 mime.types files in the current working directory...

CVE-2006-7234: Undefined Security Weakness

Untrusted search path vulnerability in Lynx before 2.8.6rel.4 allows local users to execute arbitrary code via malicious 1 .mailcap and 2 mime.types files in the current working directory...

Debian DSA-342-1 : mozart - unsafe mailcap configuration

mozart, a development platform based on the Oz language, includes MIME configuration data which specifies that Oz applications should be passed to the Oz interpreter for execution. This means that file managers, web browsers, and other programs which honor the mailcap file could automatically...

CVE-2003-0538

The mailcap file for mozart 1.2.5 and earlier causes Oz applications to be passed to the Oz interpreter, which allows remote attackers to execute arbitrary Oz programs in a MIME-aware client program...

CVE-2003-0538

The mailcap configuration in mozart 1.2.5 and earlier causes Oz applications to be passed to the Oz interpreter, allowing remote attackers to execute arbitrary Oz programs in a MIME-aware client. Impact is arbitrary code execution under the user running the MIME client; affected: mozart with mail...

CVE-2003-0538: Undefined Security Weakness

The mailcap file for mozart 1.2.5 and earlier causes Oz applications to be passed to the Oz interpreter, which allows remote attackers to execute arbitrary Oz programs in a MIME-aware client program...