lynx 2.8.6dev.15 and earlier, when advanced mode is enabled and lynx is configured as a URL handler, allows remote attackers to execute arbitrary commands via a crafted lynxcgi: URL, a related issue to CVE-2005-2929. NOTE: this might only be a vulnerability in limited deployments that have defined a lynxcgi: handler.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Lynx | Lynx | * | 2.8.6 (including) |
| Lynx | Lynx | 2.8.1-dev.1 (including) | 2.8.1-dev.1 (including) |
| Lynx | Lynx | 2.8.1-dev.10 (including) | 2.8.1-dev.10 (including) |
| Lynx | Lynx | 2.8.1-dev.11 (including) | 2.8.1-dev.11 (including) |
| Lynx | Lynx | 2.8.1-dev.12 (including) | 2.8.1-dev.12 (including) |
| Lynx | Lynx | 2.8.1-dev.13 (including) | 2.8.1-dev.13 (including) |
| Lynx | Lynx | 2.8.1-dev.14 (including) | 2.8.1-dev.14 (including) |
| Lynx | Lynx | 2.8.1-dev.15 (including) | 2.8.1-dev.15 (including) |
| Lynx | Lynx | 2.8.1-dev.16 (including) | 2.8.1-dev.16 (including) |
| Lynx | Lynx | 2.8.1-dev.17 (including) | 2.8.1-dev.17 (including) |
| Lynx | Lynx | 2.8.1-dev.18 (including) | 2.8.1-dev.18 (including) |
| Lynx | Lynx | 2.8.1-dev.19 (including) | 2.8.1-dev.19 (including) |
| Lynx | Lynx | 2.8.1-dev.2 (including) | 2.8.1-dev.2 (including) |
| Lynx | Lynx | 2.8.1-dev.20 (including) | 2.8.1-dev.20 (including) |
| Lynx | Lynx | 2.8.1-dev.21 (including) | 2.8.1-dev.21 (including) |
| Lynx | Lynx | 2.8.1-dev.22 (including) | 2.8.1-dev.22 (including) |
| Lynx | Lynx | 2.8.1-dev.23 (including) | 2.8.1-dev.23 (including) |
| Lynx | Lynx | 2.8.1-dev.24 (including) | 2.8.1-dev.24 (including) |
| Lynx | Lynx | 2.8.1-dev.26 (including) | 2.8.1-dev.26 (including) |
| Lynx | Lynx | 2.8.1-dev.27 (including) | 2.8.1-dev.27 (including) |
| Lynx | Lynx | 2.8.1-dev.28 (including) | 2.8.1-dev.28 (including) |
| Lynx | Lynx | 2.8.1-dev.29 (including) | 2.8.1-dev.29 (including) |
| Lynx | Lynx | 2.8.1-dev.3 (including) | 2.8.1-dev.3 (including) |
| Lynx | Lynx | 2.8.1-dev.4 (including) | 2.8.1-dev.4 (including) |
| Lynx | Lynx | 2.8.1-dev.5 (including) | 2.8.1-dev.5 (including) |
| Lynx | Lynx | 2.8.1-dev.6 (including) | 2.8.1-dev.6 (including) |
| Lynx | Lynx | 2.8.1-dev.7 (including) | 2.8.1-dev.7 (including) |
| Lynx | Lynx | 2.8.1-dev.8 (including) | 2.8.1-dev.8 (including) |
| Lynx | Lynx | 2.8.1-dev.9 (including) | 2.8.1-dev.9 (including) |
| Lynx | Lynx | 2.8.1-pre.1 (including) | 2.8.1-pre.1 (including) |
| Lynx | Lynx | 2.8.1-pre.10 (including) | 2.8.1-pre.10 (including) |
| Lynx | Lynx | 2.8.1-pre.11 (including) | 2.8.1-pre.11 (including) |
| Lynx | Lynx | 2.8.1-pre.2 (including) | 2.8.1-pre.2 (including) |
| Lynx | Lynx | 2.8.1-pre.3 (including) | 2.8.1-pre.3 (including) |
| Lynx | Lynx | 2.8.1-pre.4 (including) | 2.8.1-pre.4 (including) |
| Lynx | Lynx | 2.8.1-pre.5 (including) | 2.8.1-pre.5 (including) |
| Lynx | Lynx | 2.8.1-pre.6 (including) | 2.8.1-pre.6 (including) |
| Lynx | Lynx | 2.8.1-pre.7 (including) | 2.8.1-pre.7 (including) |
| Lynx | Lynx | 2.8.1-pre.8 (including) | 2.8.1-pre.8 (including) |
| Lynx | Lynx | 2.8.1-pre.9 (including) | 2.8.1-pre.9 (including) |
| Lynx | Lynx | 2.8.1-rel.1 (including) | 2.8.1-rel.1 (including) |
| Lynx | Lynx | 2.8.1-rel.2 (including) | 2.8.1-rel.2 (including) |
| Lynx | Lynx | 2.8.2-dev.1 (including) | 2.8.2-dev.1 (including) |
| Lynx | Lynx | 2.8.2-dev.10 (including) | 2.8.2-dev.10 (including) |
| Lynx | Lynx | 2.8.2-dev.11 (including) | 2.8.2-dev.11 (including) |
| Lynx | Lynx | 2.8.2-dev.12 (including) | 2.8.2-dev.12 (including) |
| Lynx | Lynx | 2.8.2-dev.13 (including) | 2.8.2-dev.13 (including) |
| Lynx | Lynx | 2.8.2-dev.14 (including) | 2.8.2-dev.14 (including) |
| Lynx | Lynx | 2.8.2-dev.15 (including) | 2.8.2-dev.15 (including) |
| Lynx | Lynx | 2.8.2-dev.16 (including) | 2.8.2-dev.16 (including) |
| Lynx | Lynx | 2.8.2-dev.17 (including) | 2.8.2-dev.17 (including) |
| Lynx | Lynx | 2.8.2-dev.18 (including) | 2.8.2-dev.18 (including) |
| Lynx | Lynx | 2.8.2-dev.19 (including) | 2.8.2-dev.19 (including) |
| Lynx | Lynx | 2.8.2-dev.2 (including) | 2.8.2-dev.2 (including) |
| Lynx | Lynx | 2.8.2-dev.20 (including) | 2.8.2-dev.20 (including) |
| Lynx | Lynx | 2.8.2-dev.21 (including) | 2.8.2-dev.21 (including) |
| Lynx | Lynx | 2.8.2-dev.22 (including) | 2.8.2-dev.22 (including) |
| Lynx | Lynx | 2.8.2-dev.23 (including) | 2.8.2-dev.23 (including) |
| Lynx | Lynx | 2.8.2-dev.24 (including) | 2.8.2-dev.24 (including) |
| Lynx | Lynx | 2.8.2-dev.25 (including) | 2.8.2-dev.25 (including) |
| Lynx | Lynx | 2.8.2-dev.26 (including) | 2.8.2-dev.26 (including) |
| Lynx | Lynx | 2.8.2-dev.3 (including) | 2.8.2-dev.3 (including) |
| Lynx | Lynx | 2.8.2-dev.4 (including) | 2.8.2-dev.4 (including) |
| Lynx | Lynx | 2.8.2-dev.5 (including) | 2.8.2-dev.5 (including) |
| Lynx | Lynx | 2.8.2-dev.6 (including) | 2.8.2-dev.6 (including) |
| Lynx | Lynx | 2.8.2-dev.7 (including) | 2.8.2-dev.7 (including) |
| Lynx | Lynx | 2.8.2-dev.8 (including) | 2.8.2-dev.8 (including) |
| Lynx | Lynx | 2.8.2-dev.9 (including) | 2.8.2-dev.9 (including) |
| Lynx | Lynx | 2.8.2-pre.1 (including) | 2.8.2-pre.1 (including) |
| Lynx | Lynx | 2.8.2-pre.10 (including) | 2.8.2-pre.10 (including) |
| Lynx | Lynx | 2.8.2-pre.11 (including) | 2.8.2-pre.11 (including) |
| Lynx | Lynx | 2.8.2-pre.2 (including) | 2.8.2-pre.2 (including) |
| Lynx | Lynx | 2.8.2-pre.3 (including) | 2.8.2-pre.3 (including) |
| Lynx | Lynx | 2.8.2-pre.4 (including) | 2.8.2-pre.4 (including) |
| Lynx | Lynx | 2.8.2-pre.5 (including) | 2.8.2-pre.5 (including) |
| Lynx | Lynx | 2.8.2-pre.6 (including) | 2.8.2-pre.6 (including) |
| Lynx | Lynx | 2.8.2-pre.7 (including) | 2.8.2-pre.7 (including) |
| Lynx | Lynx | 2.8.2-pre.8 (including) | 2.8.2-pre.8 (including) |
| Lynx | Lynx | 2.8.2-pre.9 (including) | 2.8.2-pre.9 (including) |
| Lynx | Lynx | 2.8.2-rel.1 (including) | 2.8.2-rel.1 (including) |
| Lynx | Lynx | 2.8.3-dev.1 (including) | 2.8.3-dev.1 (including) |
| Lynx | Lynx | 2.8.3-dev.10 (including) | 2.8.3-dev.10 (including) |
| Lynx | Lynx | 2.8.3-dev.11 (including) | 2.8.3-dev.11 (including) |
| Lynx | Lynx | 2.8.3-dev.12 (including) | 2.8.3-dev.12 (including) |
| Lynx | Lynx | 2.8.3-dev.13 (including) | 2.8.3-dev.13 (including) |
| Lynx | Lynx | 2.8.3-dev.14 (including) | 2.8.3-dev.14 (including) |
| Lynx | Lynx | 2.8.3-dev.15 (including) | 2.8.3-dev.15 (including) |
| Lynx | Lynx | 2.8.3-dev.16 (including) | 2.8.3-dev.16 (including) |
| Lynx | Lynx | 2.8.3-dev.17 (including) | 2.8.3-dev.17 (including) |
| Lynx | Lynx | 2.8.3-dev.18 (including) | 2.8.3-dev.18 (including) |
| Lynx | Lynx | 2.8.3-dev.19 (including) | 2.8.3-dev.19 (including) |
| Lynx | Lynx | 2.8.3-dev.2 (including) | 2.8.3-dev.2 (including) |
| Lynx | Lynx | 2.8.3-dev.20 (including) | 2.8.3-dev.20 (including) |
| Lynx | Lynx | 2.8.3-dev.21 (including) | 2.8.3-dev.21 (including) |
| Lynx | Lynx | 2.8.3-dev.22 (including) | 2.8.3-dev.22 (including) |
| Lynx | Lynx | 2.8.3-dev.23 (including) | 2.8.3-dev.23 (including) |
| Lynx | Lynx | 2.8.3-dev.3 (including) | 2.8.3-dev.3 (including) |
| Lynx | Lynx | 2.8.3-dev.4 (including) | 2.8.3-dev.4 (including) |
| Lynx | Lynx | 2.8.3-dev.5 (including) | 2.8.3-dev.5 (including) |
| Lynx | Lynx | 2.8.3-dev.6 (including) | 2.8.3-dev.6 (including) |
| Lynx | Lynx | 2.8.3-dev.7 (including) | 2.8.3-dev.7 (including) |
| Lynx | Lynx | 2.8.3-dev.8 (including) | 2.8.3-dev.8 (including) |
| Lynx | Lynx | 2.8.3-dev.9 (including) | 2.8.3-dev.9 (including) |
| Lynx | Lynx | 2.8.3-pre1 (including) | 2.8.3-pre1 (including) |
| Lynx | Lynx | 2.8.3-pre2 (including) | 2.8.3-pre2 (including) |
| Lynx | Lynx | 2.8.3-pre3 (including) | 2.8.3-pre3 (including) |
| Lynx | Lynx | 2.8.3-pre4 (including) | 2.8.3-pre4 (including) |
| Lynx | Lynx | 2.8.3-pre5 (including) | 2.8.3-pre5 (including) |
| Lynx | Lynx | 2.8.3-pre6 (including) | 2.8.3-pre6 (including) |
| Lynx | Lynx | 2.8.3-pre7 (including) | 2.8.3-pre7 (including) |
| Lynx | Lynx | 2.8.3-pre8 (including) | 2.8.3-pre8 (including) |
| Lynx | Lynx | 2.8.3-rel1 (including) | 2.8.3-rel1 (including) |
| Lynx | Lynx | 2.8.4-dev1 (including) | 2.8.4-dev1 (including) |
| Lynx | Lynx | 2.8.4-dev10 (including) | 2.8.4-dev10 (including) |
| Lynx | Lynx | 2.8.4-dev11 (including) | 2.8.4-dev11 (including) |
| Lynx | Lynx | 2.8.4-dev12 (including) | 2.8.4-dev12 (including) |
| Lynx | Lynx | 2.8.4-dev13 (including) | 2.8.4-dev13 (including) |
| Lynx | Lynx | 2.8.4-dev14 (including) | 2.8.4-dev14 (including) |
| Lynx | Lynx | 2.8.4-dev15 (including) | 2.8.4-dev15 (including) |
| Lynx | Lynx | 2.8.4-dev16 (including) | 2.8.4-dev16 (including) |
| Lynx | Lynx | 2.8.4-dev17 (including) | 2.8.4-dev17 (including) |
| Lynx | Lynx | 2.8.4-dev18 (including) | 2.8.4-dev18 (including) |
| Lynx | Lynx | 2.8.4-dev19 (including) | 2.8.4-dev19 (including) |
| Lynx | Lynx | 2.8.4-dev2 (including) | 2.8.4-dev2 (including) |
| Lynx | Lynx | 2.8.4-dev20 (including) | 2.8.4-dev20 (including) |
| Lynx | Lynx | 2.8.4-dev21 (including) | 2.8.4-dev21 (including) |
| Lynx | Lynx | 2.8.4-dev3 (including) | 2.8.4-dev3 (including) |
| Lynx | Lynx | 2.8.4-dev4 (including) | 2.8.4-dev4 (including) |
| Lynx | Lynx | 2.8.4-dev5 (including) | 2.8.4-dev5 (including) |
| Lynx | Lynx | 2.8.4-dev6 (including) | 2.8.4-dev6 (including) |
| Lynx | Lynx | 2.8.4-dev7 (including) | 2.8.4-dev7 (including) |
| Lynx | Lynx | 2.8.4-dev8 (including) | 2.8.4-dev8 (including) |
| Lynx | Lynx | 2.8.4-dev9 (including) | 2.8.4-dev9 (including) |
| Lynx | Lynx | 2.8.4-pre.1 (including) | 2.8.4-pre.1 (including) |
| Lynx | Lynx | 2.8.4-pre.2 (including) | 2.8.4-pre.2 (including) |
| Lynx | Lynx | 2.8.4-pre.3 (including) | 2.8.4-pre.3 (including) |
| Lynx | Lynx | 2.8.4-pre.4 (including) | 2.8.4-pre.4 (including) |
| Lynx | Lynx | 2.8.4-pre.5 (including) | 2.8.4-pre.5 (including) |
| Lynx | Lynx | 2.8.4-rel.1 (including) | 2.8.4-rel.1 (including) |
| Lynx | Lynx | 2.8.5-dev.1 (including) | 2.8.5-dev.1 (including) |
| Lynx | Lynx | 2.8.5-dev.10 (including) | 2.8.5-dev.10 (including) |
| Lynx | Lynx | 2.8.5-dev.11 (including) | 2.8.5-dev.11 (including) |
| Lynx | Lynx | 2.8.5-dev.12 (including) | 2.8.5-dev.12 (including) |
| Lynx | Lynx | 2.8.5-dev.13 (including) | 2.8.5-dev.13 (including) |
| Lynx | Lynx | 2.8.5-dev.14 (including) | 2.8.5-dev.14 (including) |
| Lynx | Lynx | 2.8.5-dev.15 (including) | 2.8.5-dev.15 (including) |
| Lynx | Lynx | 2.8.5-dev.16 (including) | 2.8.5-dev.16 (including) |
| Lynx | Lynx | 2.8.5-dev.17 (including) | 2.8.5-dev.17 (including) |
| Lynx | Lynx | 2.8.5-dev.2 (including) | 2.8.5-dev.2 (including) |
| Lynx | Lynx | 2.8.5-dev.3 (including) | 2.8.5-dev.3 (including) |
| Lynx | Lynx | 2.8.5-dev.4 (including) | 2.8.5-dev.4 (including) |
| Lynx | Lynx | 2.8.5-dev.5 (including) | 2.8.5-dev.5 (including) |
| Lynx | Lynx | 2.8.5-dev.6 (including) | 2.8.5-dev.6 (including) |
| Lynx | Lynx | 2.8.5-dev.7 (including) | 2.8.5-dev.7 (including) |
| Lynx | Lynx | 2.8.5-dev.8 (including) | 2.8.5-dev.8 (including) |
| Lynx | Lynx | 2.8.5-dev.9 (including) | 2.8.5-dev.9 (including) |
| Lynx | Lynx | 2.8.5-pre.1 (including) | 2.8.5-pre.1 (including) |
| Lynx | Lynx | 2.8.5-pre.2 (including) | 2.8.5-pre.2 (including) |
| Lynx | Lynx | 2.8.5-pre.3 (including) | 2.8.5-pre.3 (including) |
| Lynx | Lynx | 2.8.5-pre.4 (including) | 2.8.5-pre.4 (including) |
| Lynx | Lynx | 2.8.5-pre.5 (including) | 2.8.5-pre.5 (including) |
| Lynx | Lynx | 2.8.5-rel.1 (including) | 2.8.5-rel.1 (including) |
| Lynx | Lynx | 2.8.6-dev1 (including) | 2.8.6-dev1 (including) |
| Lynx | Lynx | 2.8.6-dev10 (including) | 2.8.6-dev10 (including) |
| Lynx | Lynx | 2.8.6-dev11 (including) | 2.8.6-dev11 (including) |
| Lynx | Lynx | 2.8.6-dev12 (including) | 2.8.6-dev12 (including) |
| Lynx | Lynx | 2.8.6-dev13 (including) | 2.8.6-dev13 (including) |
| Lynx | Lynx | 2.8.6-dev14 (including) | 2.8.6-dev14 (including) |
| Lynx | Lynx | 2.8.6-dev2 (including) | 2.8.6-dev2 (including) |
| Lynx | Lynx | 2.8.6-dev3 (including) | 2.8.6-dev3 (including) |
| Lynx | Lynx | 2.8.6-dev4 (including) | 2.8.6-dev4 (including) |
| Lynx | Lynx | 2.8.6-dev5 (including) | 2.8.6-dev5 (including) |
| Lynx | Lynx | 2.8.6-dev6 (including) | 2.8.6-dev6 (including) |
| Lynx | Lynx | 2.8.6-dev7 (including) | 2.8.6-dev7 (including) |
| Lynx | Lynx | 2.8.6-dev8 (including) | 2.8.6-dev8 (including) |
| Lynx | Lynx | 2.8.6-dev9 (including) | 2.8.6-dev9 (including) |
| Red Hat Enterprise Linux 2.1 | RedHat | lynx-0:2.8.4-18.1.3 | * |
| Red Hat Enterprise Linux 3 | RedHat | lynx-0:2.8.5-11.3 | * |
| Red Hat Enterprise Linux 4 | RedHat | lynx-0:2.8.5-18.2.el4_7.1 | * |
| Red Hat Enterprise Linux 5 | RedHat | lynx-0:2.8.5-28.1.el5_2.1 | * |
| Lynx | Ubuntu | dapper | * |
| Lynx | Ubuntu | gutsy | * |
| Lynx | Ubuntu | hardy | * |
| Lynx | Ubuntu | intrepid | * |
| Lynx | Ubuntu | upstream | * |
References
- http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html
- http://secunia.com/advisories/32416
- http://secunia.com/advisories/32967
- http://secunia.com/advisories/33568
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:217
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:218
- http://www.openwall.com/lists/oss-security/2008/10/09/2
- http://www.redhat.com/support/errata/RHSA-2008-0965.html
- http://www.securitytracker.com/id?1021105
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46228
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11204
- https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00066.html
- https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00143.html
- http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html
- http://secunia.com/advisories/32416
- http://secunia.com/advisories/32967
- http://secunia.com/advisories/33568
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:217
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:218
- http://www.openwall.com/lists/oss-security/2008/10/09/2
- http://www.redhat.com/support/errata/RHSA-2008-0965.html
- http://www.securitytracker.com/id?1021105
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46228
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11204
- https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00066.html
- https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00143.html