Red Hat Security AdvisoryRHSA-2006:0742
elinks security update
Released 2006-11-15 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 elinks-0.9.2-3.3, elinks-0.9.2-3.3.i386, elinks-0.9.2-3.3.ia64 +1
- Red Hat Enterprise Linux Desktop version 4 elinks-0.9.2-3.3, elinks-0.9.2-3.3.i386
- Red Hat Enterprise Linux ES version 4 elinks-0.9.2-3.3, elinks-0.9.2-3.3.i386, elinks-0.9.2-3.3.ia64
- Red Hat Enterprise Linux WS version 4 elinks-0.9.2-3.3, elinks-0.9.2-3.3.i386, elinks-0.9.2-3.3.ia64
Fixes 1 record
Priority MEDIUM 44
Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code via shell metacharacters in an smb:// URI, as demonstrated by using PUT and GET statements.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.08764 · Published 2006-11-15 · Fixed
