CVE Vulnerabilities

CVE-2006-5925

Published: Nov 15, 2006 | Modified: Apr 09, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM
root.io logo minimus.io logo echo.ai logo

Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code via shell metacharacters in an smb:// URI, as demonstrated by using PUT and GET statements.

Affected Software

NameVendorStart VersionEnd Version
ElinksElinks0.9.2 (including)0.9.2 (including)
LinksLinks1.00pre12 (including)1.00pre12 (including)
Red Hat Enterprise Linux 4RedHatelinks-0:0.9.2-3.3*
ElinksUbuntudapper*
ElinksUbuntudevel*
ElinksUbuntuedgy*
ElinksUbuntufeisty*
ElinksUbuntugutsy*
ElinksUbuntuhardy*
ElinksUbuntuintrepid*
ElinksUbuntujaunty*
ElinksUbuntukarmic*
LinksUbuntudapper*
LinksUbuntuedgy*
LinksUbuntufeisty*
LinksUbuntugutsy*
Links2Ubuntudapper*
Links2Ubuntudevel*
Links2Ubuntuedgy*
Links2Ubuntufeisty*
Links2Ubuntugutsy*
Links2Ubuntuhardy*
Links2Ubuntuintrepid*
Links2Ubuntujaunty*
Links2Ubuntukarmic*

References