Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code via shell metacharacters in an smb:// URI, as demonstrated by using PUT and GET statements.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Elinks | Elinks | 0.9.2 (including) | 0.9.2 (including) |
| Links | Links | 1.00pre12 (including) | 1.00pre12 (including) |
| Elinks | Ubuntu | dapper | * |
| Elinks | Ubuntu | devel | * |
| Elinks | Ubuntu | edgy | * |
| Elinks | Ubuntu | feisty | * |
| Elinks | Ubuntu | gutsy | * |
| Elinks | Ubuntu | hardy | * |
| Elinks | Ubuntu | intrepid | * |
| Elinks | Ubuntu | jaunty | * |
| Elinks | Ubuntu | karmic | * |
| Links | Ubuntu | dapper | * |
| Links | Ubuntu | edgy | * |
| Links | Ubuntu | feisty | * |
| Links | Ubuntu | gutsy | * |
| Links2 | Ubuntu | dapper | * |
| Links2 | Ubuntu | devel | * |
| Links2 | Ubuntu | edgy | * |
| Links2 | Ubuntu | feisty | * |
| Links2 | Ubuntu | gutsy | * |
| Links2 | Ubuntu | hardy | * |
| Links2 | Ubuntu | intrepid | * |
| Links2 | Ubuntu | jaunty | * |
| Links2 | Ubuntu | karmic | * |
| Red Hat Enterprise Linux 4 | RedHat | elinks-0:0.9.2-3.3 | * |