CVE-2006-5925

ALTO 7.5CVE-2006-5925 · Published 15/11/2006 · updated 16/06/2026

In breve

CVE-2006-5925 è una vulnerabilità ALTO (CVSS 7.5) che riguarda elinks (elinks), links (links).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 8.8%, superiore al 95.2% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
elinks elinks	`= 0.9.2`	No fix yet
links links	`= 1.00pre12`	No fix yet

Description

Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code via shell metacharacters in an smb:// URI, as demonstrated by using PUT and GET statements.

References

bugzilla.elinks.cz/show_bug.cgi
marc.info
secunia.com/advisories/22905 · Vendor Advisory
secunia.com/advisories/22920 · Vendor Advisory
secunia.com/advisories/22923 · Vendor Advisory
secunia.com/advisories/23022 · Vendor Advisory
secunia.com/advisories/23132 · Vendor Advisory
secunia.com/advisories/23188 · Vendor Advisory
secunia.com/advisories/23234 · Vendor Advisory
secunia.com/advisories/23389 · Vendor Advisory
secunia.com/advisories/23467 · Vendor Advisory
secunia.com/advisories/24005 · Vendor Advisory
secunia.com/advisories/24054 · Vendor Advisory
security.gentoo.org/glsa/glsa-200612-16.xml

Altre vulnerabilità di elinks

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

elinks

= 0.9.2

No fix yet

links

= 1.00pre12

No fix yet

Altre vulnerabilità di elinks

Vedi tutto →