CVE-2006-5925

2006-11-1500:00:00

ubuntu.com

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.843 High

EPSS

Percentile

98.5%

JSON

Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed
allows remote attackers to execute arbitrary code via shell metacharacters
in an smb:// URI, as demonstrated by using PUT and GET statements.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchelinks< 0.10.6-1ubuntu3.4UNKNOWN
ubuntu7.04noarchelinks< 0.11.1-1.2ubuntu2.1UNKNOWN
ubuntu7.10noarchelinks< 0.11.1-1.4ubuntu1UNKNOWN
ubuntu8.04noarchelinks< 0.11.1-1.4ubuntu1UNKNOWN
ubuntu8.10noarchelinks< 0.11.1-1.4ubuntu1UNKNOWN
ubuntu9.04noarchelinks< 0.11.1-1.4ubuntu1UNKNOWN
ubuntu9.10noarchelinks< 0.11.1-1.4ubuntu1UNKNOWN
ubuntu6.06noarchlinks< 0.99+1.00pre12-1sarge1build0.6.06.1UNKNOWN
ubuntu7.04noarchlinks< 0.99+1.00pre12-1.1UNKNOWN
ubuntu7.10noarchlinks< 0.99+1.00pre12-1.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	elinks	< 0.10.6-1ubuntu3.4	UNKNOWN
ubuntu	7.04	noarch	elinks	< 0.11.1-1.2ubuntu2.1	UNKNOWN
ubuntu	7.10	noarch	elinks	< 0.11.1-1.4ubuntu1	UNKNOWN
ubuntu	8.04	noarch	elinks	< 0.11.1-1.4ubuntu1	UNKNOWN
ubuntu	8.10	noarch	elinks	< 0.11.1-1.4ubuntu1	UNKNOWN
ubuntu	9.04	noarch	elinks	< 0.11.1-1.4ubuntu1	UNKNOWN
ubuntu	9.10	noarch	elinks	< 0.11.1-1.4ubuntu1	UNKNOWN
ubuntu	6.06	noarch	links	< 0.99+1.00pre12-1sarge1build0.6.06.1	UNKNOWN
ubuntu	7.04	noarch	links	< 0.99+1.00pre12-1.1	UNKNOWN
ubuntu	7.10	noarch	links	< 0.99+1.00pre12-1.1	UNKNOWN