Red Hat Security AdvisoryRHSA-2008:0965
lynx security update
Released 2008-10-27 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 lynx-2.8.5-11.3, lynx-2.8.5-11.3.i386
- Red Hat Enterprise Linux (v. 5 server) lynx-2.8.5-28.1.el5_2.1, lynx-2.8.5-28.1.el5_2.1.i386, lynx-2.8.5-28.1.el5_2.1.ia64 +1
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 lynx-2.8.4-18.1.3, lynx-2.8.4-18.1.3.i386, lynx-2.8.4-18.1.3.ia64
- Red Hat Enterprise Linux AS version 3 lynx-2.8.5-11.3, lynx-2.8.5-11.3.i386, lynx-2.8.5-11.3.ia64 +1
- Red Hat Enterprise Linux AS version 4 lynx-2.8.5-18.2.el4_7.1, lynx-2.8.5-18.2.el4_7.1.i386, lynx-2.8.5-18.2.el4_7.1.ia64 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) lynx-2.8.5-28.1.el5_2.1, lynx-2.8.5-28.1.el5_2.1.i386
- Red Hat Enterprise Linux Desktop version 4 lynx-2.8.5-18.2.el4_7.1, lynx-2.8.5-18.2.el4_7.1.i386
- Red Hat Enterprise Linux ES version 2.1 lynx-2.8.4-18.1.3, lynx-2.8.4-18.1.3.i386
- Red Hat Enterprise Linux ES version 3 lynx-2.8.5-11.3, lynx-2.8.5-11.3.i386, lynx-2.8.5-11.3.ia64
- Red Hat Enterprise Linux ES version 4 lynx-2.8.5-18.2.el4_7.1, lynx-2.8.5-18.2.el4_7.1.i386, lynx-2.8.5-18.2.el4_7.1.ia64
- Red Hat Enterprise Linux WS version 2.1 lynx-2.8.4-18.1.3, lynx-2.8.4-18.1.3.i386
- Red Hat Enterprise Linux WS version 3 lynx-2.8.5-11.3, lynx-2.8.5-11.3.i386, lynx-2.8.5-11.3.ia64
- Red Hat Enterprise Linux WS version 4 lynx-2.8.5-18.2.el4_7.1, lynx-2.8.5-18.2.el4_7.1.i386, lynx-2.8.5-18.2.el4_7.1.ia64
- Red Hat Linux Advanced Workstation 2.1 lynx-2.8.4-18.1.3, lynx-2.8.4-18.1.3.ia64
Fixes 2 records
Priority MEDIUM 51
lynx 2.8.6dev.15 and earlier, when advanced mode is enabled and lynx is configured as a URL handler, allows remote attackers to execute arbitrary commands via a crafted lynxcgi: URL, a related issue to CVE-2005-2929.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.0506 · Published 2008-10-22 · Fixed
Priority LOW 23
Untrusted search path vulnerability in Lynx before 2.8.6rel.4 allows local users to execute arbitrary code via malicious (1) .mailcap and (2) mime.types files in the current working directory.
CVSS 2.0MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.00882 · Published 2008-10-27 · Fixed
