CVE

Id
34807  
CVE No.
CVE-2008-4690  
Status
Candidate  
Description
lynx 2.8.6dev.15 and earlier, when advanced mode is enabled and lynx is configured as a URL handler, allows remote attackers to execute arbitrary commands via a crafted lynxcgi: URL, a related issue to CVE-2005-2929. NOTE: this might only be a vulnerability in limited deployments that have defined a lynxcgi: handler.  
Phase
Assigned (20081022)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
381141 34807 CVE-2008-4690 MLIST:[oss-security] 20081009 lynx lynxcgi handler flaw  View
381142 34807 CVE-2008-4690 URL:http://www.openwall.com/lists/oss-security/2008/10/09/2  View
381143 34807 CVE-2008-4690 FEDORA:FEDORA-2008-9550  View
381144 34807 CVE-2008-4690 URL:https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00066.html  View
381145 34807 CVE-2008-4690 FEDORA:FEDORA-2008-9597  View
381146 34807 CVE-2008-4690 URL:https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00143.html  View
381147 34807 CVE-2008-4690 MANDRIVA:MDVSA-2008:217  View
381148 34807 CVE-2008-4690 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2008:217  View
381149 34807 CVE-2008-4690 MANDRIVA:MDVSA-2008:218  View
381150 34807 CVE-2008-4690 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2008:218  View
381151 34807 CVE-2008-4690 REDHAT:RHSA-2008:0965  View
381152 34807 CVE-2008-4690 URL:http://www.redhat.com/support/errata/RHSA-2008-0965.html  View
381153 34807 CVE-2008-4690 SUSE:SUSE-SR:2009:002  View
381154 34807 CVE-2008-4690 URL:http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html  View
381155 34807 CVE-2008-4690 OVAL:oval:org.mitre.oval:def:11204  View
381156 34807 CVE-2008-4690 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11204  View
381157 34807 CVE-2008-4690 SECTRACK:1021105  View
381158 34807 CVE-2008-4690 URL:http://www.securitytracker.com/id?1021105  View
381159 34807 CVE-2008-4690 SECUNIA:32416  View
381160 34807 CVE-2008-4690 URL:http://secunia.com/advisories/32416  View
381161 34807 CVE-2008-4690 SECUNIA:32967  View
381162 34807 CVE-2008-4690 URL:http://secunia.com/advisories/32967  View
381163 34807 CVE-2008-4690 SECUNIA:33568  View
381164 34807 CVE-2008-4690 URL:http://secunia.com/advisories/33568  View
381165 34807 CVE-2008-4690 XF:lynx-lynxcgi-code-execution(46228)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47008 JVNDB-2008-002318 Opera におけるサービス運用妨害 (DoS) または任意のコードを実行される脆弱性 Opera には、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2008-4694 34807 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002318.html  View