Security Advisories (MDKSA-2005:211): lynx

[aru]

Mandriva Security Advisories MDKSA-2005:211 : lynx

 

Updated lynx packages fix critical vulnerability

November 12th, 2005

 

An arbitrary command execution vulnerability was discovered in the lynx "lynxcgi:" URI handler.An attacker could create a web page that redirects to a malicious URL which could then execute arbitrary code as the user running lynx. The updated packages have been patched to address this issue.

 

 

The released versions of Mandriva GNU/Linux affected are:

• 10.1
  
• CS2.1
  
• CS3.0
  
• MNF2.0
  
• 10.2
  
• 2006.0
  

Full information about this advisory, including the updated packages, is available at:

www.mandriva.com/security/advisories?name=MDKSA-2005:211

 

Other references:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2929

 

Posted automatically by aru (mdksec2mub v: mdksec2mub,v 0.14 2005/05/15 18:06:11 aru Exp aru $)