NVD

Id
64500  
Name
CVE-2006-5925  
Description
Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code via shell metacharacters in an smb:// URI, as demonstrated by using PUT and GET statements.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-11-15  
Modified Date
2016-12-07  
Seq
2006-5925  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
336676 64500 CVE-2006-5925 http://bugzilla.elinks.cz/show_bug.cgi?id=841  View
336677 64500 CVE-2006-5925 20061115 Links smbclient command execution  View
336678 64500 CVE-2006-5925 oval:org.mitre.oval:def:11213  View
336679 64500 CVE-2006-5925 GLSA-200612-16  View
336680 64500 CVE-2006-5925 1017232  View
336681 64500 CVE-2006-5925 1017233  View
336682 64500 CVE-2006-5925 DSA-1228  View
336683 64500 CVE-2006-5925 DSA-1240  View
336684 64500 CVE-2006-5925 GLSA-200701-27  View
336685 64500 CVE-2006-5925 MDKSA-2006:216  View
336686 64500 CVE-2006-5925 SUSE-SR:2006:027  View
336687 64500 CVE-2006-5925 RHSA-2006:0742  View
336688 64500 CVE-2006-5925 20061115 Links smbclient command execution  View
336689 64500 CVE-2006-5925 21082  View
336690 64500 CVE-2006-5925 2007-0005  View
336691 64500 CVE-2006-5925 links-smbclient-command-execution(30299)  View
336692 64500 CVE-2006-5925 DSA-1226  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58584 JVNDB-2006-000780 Links および ELinsks における smbclient コマンドを実行される脆弱性 テキスト Web ブラウザ Links および ELinks には、SMB プロトコルの取り扱いに不備が存在するため、smb:// URI を介して smbclient コマンドが実行可能な脆弱性が存在します。 CVE-2006-5925 22027 CVE-2006-5925 64500 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000780.html 2006-11-15 2007-04-01 View