CVE-2005-3120
CAN-2005-3120 lynx buffer overflow
Severidad por fuente
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD, Red Hat.
Descripción
Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape (ESC) characters.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| debian 11 | lynx | 2.8.5-2sarge1 |
| debian 12 | lynx | 2.8.5-2sarge1 |
| debian 13 | lynx | 2.8.5-2sarge1 |
| debian 14 | lynx | 2.8.5-2sarge1 |
| echo | lynx | 2.8.5-2sarge1 |
Referencias
- ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.7/SCOSA-2006.7.txt
- ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.47/SCOSA-2005.47.txt
- http://lists.grok.org.uk/pipermail/full-disclosure/2005-October/038019.html
- http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html
- http://secunia.com/advisories/17150
- http://secunia.com/advisories/17216
- http://secunia.com/advisories/17230
- http://secunia.com/advisories/17231
Las 38 referencias
- http://secunia.com/advisories/17238
- http://secunia.com/advisories/17248
- http://secunia.com/advisories/17340
- http://secunia.com/advisories/17360
- http://secunia.com/advisories/17444
- http://secunia.com/advisories/17445
- http://secunia.com/advisories/17480
- http://secunia.com/advisories/18376
- http://secunia.com/advisories/18584
- http://secunia.com/advisories/20383
- http://securitytracker.com/id?1015065
- http://slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.423056
- http://support.avaya.com/elmodocs2/security/ASA-2006-010.htm
- http://www.debian.org/security/2005/dsa-874
- http://www.debian.org/security/2005/dsa-876
- http://www.debian.org/security/2006/dsa-1085
- http://www.gentoo.org/security/en/glsa/glsa-200510-15.xml
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:186
- http://www.novell.com/linux/security/advisories/2005_25_sr.html
- http://www.openpkg.org/security/OpenPKG-SA-2005.026-lynx.html
- http://www.redhat.com/support/errata/RHSA-2005-803.html
- http://www.securityfocus.com/archive/1/419763/100/0/threaded
- http://www.securityfocus.com/archive/1/435689/30/4740/threaded
- http://www.securityfocus.com/bid/15117
- https://access.redhat.com/security/cve/CVE-2005-3120
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=170253
- https://nvd.nist.gov/vuln/detail/CVE-2005-3120
- https://oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:9257
- https://usn.ubuntu.com/206-1/
- https://www.cve.org/CVERecord?id=CVE-2005-3120