CVE-2008-4690 lynx 2.8.6dev.15 and earlier, when advanced mode is enabled and lynx is configured as a URL handler, allows remote attackers to execute arbitrary commands via a crafted lynxcgi: URL, a related issue t...
HighCVSS 10.0
EPSS 5.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
lynx 2.8.6dev.15 and earlier, when advanced mode is enabled and lynx is configured as a URL handler, allows remote attackers to execute arbitrary commands via a crafted lynxcgi: URL, a related issue to CVE-2005-2929. NOTE: this might only be a vulnerability in limited deployments that have defined a lynxcgi: handler.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lynx | <= 2.8.6 | No fix listed |
| lynx | = 2.8.1-dev.1 | No fix listed |
| lynx | = 2.8.1-dev.10 | No fix listed |
| lynx | = 2.8.1-dev.11 | No fix listed |
| lynx | = 2.8.1-dev.12 | No fix listed |
| lynx | = 2.8.1-dev.13 | No fix listed |
| lynx | = 2.8.1-dev.14 | No fix listed |
| lynx | = 2.8.1-dev.15 | No fix listed |
| lynx | = 2.8.1-dev.16 | No fix listed |
| lynx | = 2.8.1-dev.17 | No fix listed |
| lynx | = 2.8.1-dev.18 | No fix listed |
| lynx | = 2.8.1-dev.19 | No fix listed |
| lynx | = 2.8.1-dev.2 | No fix listed |
| lynx | = 2.8.1-dev.20 | No fix listed |
| lynx | = 2.8.1-dev.21 | No fix listed |
| lynx | = 2.8.1-dev.22 | No fix listed |
| lynx | = 2.8.1-dev.23 | No fix listed |
| lynx | = 2.8.1-dev.24 | No fix listed |
| lynx | = 2.8.1-dev.26 | No fix listed |
| lynx | = 2.8.1-dev.27 | No fix listed |
| lynx | = 2.8.1-dev.28 | No fix listed |
| lynx | = 2.8.1-dev.29 | No fix listed |
| lynx | = 2.8.1-dev.3 | No fix listed |
| lynx | = 2.8.1-dev.4 | No fix listed |
| lynx | = 2.8.1-dev.5 | No fix listed |
Show 151 more
| Product | Affected versions | Fixed in |
|---|---|---|
| lynx | = 2.8.1-dev.6 | No fix listed |
| lynx | = 2.8.1-dev.7 | No fix listed |
| lynx | = 2.8.1-dev.8 | No fix listed |
| lynx | = 2.8.1-dev.9 | No fix listed |
| lynx | = 2.8.1-pre.1 | No fix listed |
| lynx | = 2.8.1-pre.10 | No fix listed |
| lynx | = 2.8.1-pre.11 | No fix listed |
| lynx | = 2.8.1-pre.2 | No fix listed |
| lynx | = 2.8.1-pre.3 | No fix listed |
| lynx | = 2.8.1-pre.4 | No fix listed |
| lynx | = 2.8.1-pre.5 | No fix listed |
| lynx | = 2.8.1-pre.6 | No fix listed |
| lynx | = 2.8.1-pre.7 | No fix listed |
| lynx | = 2.8.1-pre.8 | No fix listed |
| lynx | = 2.8.1-pre.9 | No fix listed |
| lynx | = 2.8.1-rel.1 | No fix listed |
| lynx | = 2.8.1-rel.2 | No fix listed |
| lynx | = 2.8.2-dev.1 | No fix listed |
| lynx | = 2.8.2-dev.10 | No fix listed |
| lynx | = 2.8.2-dev.11 | No fix listed |
| lynx | = 2.8.2-dev.12 | No fix listed |
| lynx | = 2.8.2-dev.13 | No fix listed |
| lynx | = 2.8.2-dev.14 | No fix listed |
| lynx | = 2.8.2-dev.15 | No fix listed |
| lynx | = 2.8.2-dev.16 | No fix listed |
| lynx | = 2.8.2-dev.17 | No fix listed |
| lynx | = 2.8.2-dev.18 | No fix listed |
| lynx | = 2.8.2-dev.19 | No fix listed |
| lynx | = 2.8.2-dev.2 | No fix listed |
| lynx | = 2.8.2-dev.20 | No fix listed |
| lynx | = 2.8.2-dev.21 | No fix listed |
| lynx | = 2.8.2-dev.22 | No fix listed |
| lynx | = 2.8.2-dev.23 | No fix listed |
| lynx | = 2.8.2-dev.24 | No fix listed |
| lynx | = 2.8.2-dev.25 | No fix listed |
| lynx | = 2.8.2-dev.26 | No fix listed |
| lynx | = 2.8.2-dev.3 | No fix listed |
| lynx | = 2.8.2-dev.4 | No fix listed |
| lynx | = 2.8.2-dev.5 | No fix listed |
| lynx | = 2.8.2-dev.6 | No fix listed |
| lynx | = 2.8.2-dev.7 | No fix listed |
| lynx | = 2.8.2-dev.8 | No fix listed |
| lynx | = 2.8.2-dev.9 | No fix listed |
| lynx | = 2.8.2-pre.1 | No fix listed |
| lynx | = 2.8.2-pre.10 | No fix listed |
| lynx | = 2.8.2-pre.11 | No fix listed |
| lynx | = 2.8.2-pre.2 | No fix listed |
| lynx | = 2.8.2-pre.3 | No fix listed |
| lynx | = 2.8.2-pre.4 | No fix listed |
| lynx | = 2.8.2-pre.5 | No fix listed |
| lynx | = 2.8.2-pre.6 | No fix listed |
| lynx | = 2.8.2-pre.7 | No fix listed |
| lynx | = 2.8.2-pre.8 | No fix listed |
| lynx | = 2.8.2-pre.9 | No fix listed |
| lynx | = 2.8.2-rel.1 | No fix listed |
| lynx | = 2.8.3-dev.1 | No fix listed |
| lynx | = 2.8.3-dev.10 | No fix listed |
| lynx | = 2.8.3-dev.11 | No fix listed |
| lynx | = 2.8.3-dev.12 | No fix listed |
| lynx | = 2.8.3-dev.13 | No fix listed |
| lynx | = 2.8.3-dev.14 | No fix listed |
| lynx | = 2.8.3-dev.15 | No fix listed |
| lynx | = 2.8.3-dev.16 | No fix listed |
| lynx | = 2.8.3-dev.17 | No fix listed |
| lynx | = 2.8.3-dev.18 | No fix listed |
| lynx | = 2.8.3-dev.19 | No fix listed |
| lynx | = 2.8.3-dev.2 | No fix listed |
| lynx | = 2.8.3-dev.20 | No fix listed |
| lynx | = 2.8.3-dev.21 | No fix listed |
| lynx | = 2.8.3-dev.22 | No fix listed |
| lynx | = 2.8.3-dev.23 | No fix listed |
| lynx | = 2.8.3-dev.3 | No fix listed |
| lynx | = 2.8.3-dev.4 | No fix listed |
| lynx | = 2.8.3-dev.5 | No fix listed |
| lynx | = 2.8.3-dev.6 | No fix listed |
| lynx | = 2.8.3-dev.7 | No fix listed |
| lynx | = 2.8.3-dev.8 | No fix listed |
| lynx | = 2.8.3-dev.9 | No fix listed |
| lynx | = 2.8.3-pre1 | No fix listed |
| lynx | = 2.8.3-pre2 | No fix listed |
| lynx | = 2.8.3-pre3 | No fix listed |
| lynx | = 2.8.3-pre4 | No fix listed |
| lynx | = 2.8.3-pre5 | No fix listed |
| lynx | = 2.8.3-pre6 | No fix listed |
| lynx | = 2.8.3-pre7 | No fix listed |
| lynx | = 2.8.3-pre8 | No fix listed |
| lynx | = 2.8.3-rel1 | No fix listed |
| lynx | = 2.8.4-dev1 | No fix listed |
| lynx | = 2.8.4-dev10 | No fix listed |
| lynx | = 2.8.4-dev11 | No fix listed |
| lynx | = 2.8.4-dev12 | No fix listed |
| lynx | = 2.8.4-dev13 | No fix listed |
| lynx | = 2.8.4-dev14 | No fix listed |
| lynx | = 2.8.4-dev15 | No fix listed |
| lynx | = 2.8.4-dev16 | No fix listed |
| lynx | = 2.8.4-dev17 | No fix listed |
| lynx | = 2.8.4-dev18 | No fix listed |
| lynx | = 2.8.4-dev19 | No fix listed |
| lynx | = 2.8.4-dev2 | No fix listed |
| lynx | = 2.8.4-dev20 | No fix listed |
| lynx | = 2.8.4-dev21 | No fix listed |
| lynx | = 2.8.4-dev3 | No fix listed |
| lynx | = 2.8.4-dev4 | No fix listed |
| lynx | = 2.8.4-dev5 | No fix listed |
| lynx | = 2.8.4-dev6 | No fix listed |
| lynx | = 2.8.4-dev7 | No fix listed |
| lynx | = 2.8.4-dev8 | No fix listed |
| lynx | = 2.8.4-dev9 | No fix listed |
| lynx | = 2.8.4-pre.1 | No fix listed |
| lynx | = 2.8.4-pre.2 | No fix listed |
| lynx | = 2.8.4-pre.3 | No fix listed |
| lynx | = 2.8.4-pre.4 | No fix listed |
| lynx | = 2.8.4-pre.5 | No fix listed |
| lynx | = 2.8.4-rel.1 | No fix listed |
| lynx | = 2.8.5-dev.1 | No fix listed |
| lynx | = 2.8.5-dev.10 | No fix listed |
| lynx | = 2.8.5-dev.11 | No fix listed |
| lynx | = 2.8.5-dev.12 | No fix listed |
| lynx | = 2.8.5-dev.13 | No fix listed |
| lynx | = 2.8.5-dev.14 | No fix listed |
| lynx | = 2.8.5-dev.15 | No fix listed |
| lynx | = 2.8.5-dev.16 | No fix listed |
| lynx | = 2.8.5-dev.17 | No fix listed |
| lynx | = 2.8.5-dev.2 | No fix listed |
| lynx | = 2.8.5-dev.3 | No fix listed |
| lynx | = 2.8.5-dev.4 | No fix listed |
| lynx | = 2.8.5-dev.5 | No fix listed |
| lynx | = 2.8.5-dev.6 | No fix listed |
| lynx | = 2.8.5-dev.7 | No fix listed |
| lynx | = 2.8.5-dev.8 | No fix listed |
| lynx | = 2.8.5-dev.9 | No fix listed |
| lynx | = 2.8.5-pre.1 | No fix listed |
| lynx | = 2.8.5-pre.2 | No fix listed |
| lynx | = 2.8.5-pre.3 | No fix listed |
| lynx | = 2.8.5-pre.4 | No fix listed |
| lynx | = 2.8.5-pre.5 | No fix listed |
| lynx | = 2.8.5-rel.1 | No fix listed |
| lynx | = 2.8.6-dev1 | No fix listed |
| lynx | = 2.8.6-dev10 | No fix listed |
| lynx | = 2.8.6-dev11 | No fix listed |
| lynx | = 2.8.6-dev12 | No fix listed |
| lynx | = 2.8.6-dev13 | No fix listed |
| lynx | = 2.8.6-dev14 | No fix listed |
| lynx | = 2.8.6-dev2 | No fix listed |
| lynx | = 2.8.6-dev3 | No fix listed |
| lynx | = 2.8.6-dev4 | No fix listed |
| lynx | = 2.8.6-dev5 | No fix listed |
| lynx | = 2.8.6-dev6 | No fix listed |
| lynx | = 2.8.6-dev7 | No fix listed |
| lynx | = 2.8.6-dev8 | No fix listed |
| lynx | = 2.8.6-dev9 | No fix listed |
References
- SUSE-SR:2009:002 vendor-advisory
- 32416 third-party-advisory vendor-advisory
- 32967 third-party-advisory
- 33568 third-party-advisory
- MDVSA-2008:217 vendor-advisory
- MDVSA-2008:218 vendor-advisory
- [oss-security] 20081009 lynx lynxcgi handler flaw mailing-list
- RHSA-2008:0965 vendor-advisory
- 1021105 vdb-entry
- lynx-lynxcgi-code-execution(46228) vdb-entry
- oval:org.mitre.oval:def:11204 signature vdb-entry
- FEDORA-2008-9550 vendor-advisory
- FEDORA-2008-9597 vendor-advisory
- Debian Security Tracker CVE-2008-4690 vendor-advisory