CVE-2008-4690

Description

lynx 2.8.6dev.15 and earlier, when advanced mode is enabled and lynx is configured as a URL handler, allows remote attackers to execute arbitrary commands via a crafted lynxcgi: URL, a related issue to CVE-2005-2929. NOTE: this might only be a vulnerability in limited deployments that have defined a lynxcgi: handler.

Software From Fixed in
lynx / lynx - 2.8.6.x
lynx / lynx 2.8.1-dev.1 2.8.1-dev.1.x
lynx / lynx 2.8.1-dev.10 2.8.1-dev.10.x
lynx / lynx 2.8.1-dev.11 2.8.1-dev.11.x
lynx / lynx 2.8.1-dev.12 2.8.1-dev.12.x
lynx / lynx 2.8.1-dev.13 2.8.1-dev.13.x
lynx / lynx 2.8.1-dev.14 2.8.1-dev.14.x
lynx / lynx 2.8.1-dev.15 2.8.1-dev.15.x
lynx / lynx 2.8.1-dev.16 2.8.1-dev.16.x
lynx / lynx 2.8.1-dev.17 2.8.1-dev.17.x
lynx / lynx 2.8.1-dev.18 2.8.1-dev.18.x
lynx / lynx 2.8.1-dev.19 2.8.1-dev.19.x
lynx / lynx 2.8.1-dev.2 2.8.1-dev.2.x
lynx / lynx 2.8.1-dev.20 2.8.1-dev.20.x
lynx / lynx 2.8.1-dev.21 2.8.1-dev.21.x
lynx / lynx 2.8.1-dev.22 2.8.1-dev.22.x
lynx / lynx 2.8.1-dev.23 2.8.1-dev.23.x
lynx / lynx 2.8.1-dev.24 2.8.1-dev.24.x
lynx / lynx 2.8.1-dev.26 2.8.1-dev.26.x
lynx / lynx 2.8.1-dev.27 2.8.1-dev.27.x
lynx / lynx 2.8.1-dev.28 2.8.1-dev.28.x
lynx / lynx 2.8.1-dev.29 2.8.1-dev.29.x
lynx / lynx 2.8.1-dev.3 2.8.1-dev.3.x
lynx / lynx 2.8.1-dev.4 2.8.1-dev.4.x
lynx / lynx 2.8.1-dev.5 2.8.1-dev.5.x
lynx / lynx 2.8.1-dev.6 2.8.1-dev.6.x
lynx / lynx 2.8.1-dev.7 2.8.1-dev.7.x
lynx / lynx 2.8.1-dev.8 2.8.1-dev.8.x
lynx / lynx 2.8.1-dev.9 2.8.1-dev.9.x
lynx / lynx 2.8.1-pre.1 2.8.1-pre.1.x
lynx / lynx 2.8.1-pre.10 2.8.1-pre.10.x
lynx / lynx 2.8.1-pre.11 2.8.1-pre.11.x
lynx / lynx 2.8.1-pre.2 2.8.1-pre.2.x
lynx / lynx 2.8.1-pre.3 2.8.1-pre.3.x
lynx / lynx 2.8.1-pre.4 2.8.1-pre.4.x
lynx / lynx 2.8.1-pre.5 2.8.1-pre.5.x
lynx / lynx 2.8.1-pre.6 2.8.1-pre.6.x
lynx / lynx 2.8.1-pre.7 2.8.1-pre.7.x
lynx / lynx 2.8.1-pre.8 2.8.1-pre.8.x
lynx / lynx 2.8.1-pre.9 2.8.1-pre.9.x
lynx / lynx 2.8.1-rel.1 2.8.1-rel.1.x
lynx / lynx 2.8.1-rel.2 2.8.1-rel.2.x
lynx / lynx 2.8.2-dev.1 2.8.2-dev.1.x
lynx / lynx 2.8.2-dev.10 2.8.2-dev.10.x
lynx / lynx 2.8.2-dev.11 2.8.2-dev.11.x
lynx / lynx 2.8.2-dev.12 2.8.2-dev.12.x
lynx / lynx 2.8.2-dev.13 2.8.2-dev.13.x
lynx / lynx 2.8.2-dev.14 2.8.2-dev.14.x
lynx / lynx 2.8.2-dev.15 2.8.2-dev.15.x
lynx / lynx 2.8.2-dev.16 2.8.2-dev.16.x
lynx / lynx 2.8.2-dev.17 2.8.2-dev.17.x
lynx / lynx 2.8.2-dev.18 2.8.2-dev.18.x
lynx / lynx 2.8.2-dev.19 2.8.2-dev.19.x
lynx / lynx 2.8.2-dev.2 2.8.2-dev.2.x
lynx / lynx 2.8.2-dev.20 2.8.2-dev.20.x
lynx / lynx 2.8.2-dev.21 2.8.2-dev.21.x
lynx / lynx 2.8.2-dev.22 2.8.2-dev.22.x
lynx / lynx 2.8.2-dev.23 2.8.2-dev.23.x
lynx / lynx 2.8.2-dev.24 2.8.2-dev.24.x
lynx / lynx 2.8.2-dev.25 2.8.2-dev.25.x
lynx / lynx 2.8.2-dev.26 2.8.2-dev.26.x
lynx / lynx 2.8.2-dev.3 2.8.2-dev.3.x
lynx / lynx 2.8.2-dev.4 2.8.2-dev.4.x
lynx / lynx 2.8.2-dev.5 2.8.2-dev.5.x
lynx / lynx 2.8.2-dev.6 2.8.2-dev.6.x
lynx / lynx 2.8.2-dev.7 2.8.2-dev.7.x
lynx / lynx 2.8.2-dev.8 2.8.2-dev.8.x
lynx / lynx 2.8.2-dev.9 2.8.2-dev.9.x
lynx / lynx 2.8.2-pre.1 2.8.2-pre.1.x
lynx / lynx 2.8.2-pre.10 2.8.2-pre.10.x
lynx / lynx 2.8.2-pre.11 2.8.2-pre.11.x
lynx / lynx 2.8.2-pre.2 2.8.2-pre.2.x
lynx / lynx 2.8.2-pre.3 2.8.2-pre.3.x
lynx / lynx 2.8.2-pre.4 2.8.2-pre.4.x
lynx / lynx 2.8.2-pre.5 2.8.2-pre.5.x
lynx / lynx 2.8.2-pre.6 2.8.2-pre.6.x
lynx / lynx 2.8.2-pre.7 2.8.2-pre.7.x
lynx / lynx 2.8.2-pre.8 2.8.2-pre.8.x
lynx / lynx 2.8.2-pre.9 2.8.2-pre.9.x
lynx / lynx 2.8.2-rel.1 2.8.2-rel.1.x
lynx / lynx 2.8.3-dev.1 2.8.3-dev.1.x
lynx / lynx 2.8.3-dev.10 2.8.3-dev.10.x
lynx / lynx 2.8.3-dev.11 2.8.3-dev.11.x
lynx / lynx 2.8.3-dev.12 2.8.3-dev.12.x
lynx / lynx 2.8.3-dev.13 2.8.3-dev.13.x
lynx / lynx 2.8.3-dev.14 2.8.3-dev.14.x
lynx / lynx 2.8.3-dev.15 2.8.3-dev.15.x
lynx / lynx 2.8.3-dev.16 2.8.3-dev.16.x
lynx / lynx 2.8.3-dev.17 2.8.3-dev.17.x
lynx / lynx 2.8.3-dev.18 2.8.3-dev.18.x
lynx / lynx 2.8.3-dev.19 2.8.3-dev.19.x
lynx / lynx 2.8.3-dev.2 2.8.3-dev.2.x
lynx / lynx 2.8.3-dev.20 2.8.3-dev.20.x
lynx / lynx 2.8.3-dev.21 2.8.3-dev.21.x
lynx / lynx 2.8.3-dev.22 2.8.3-dev.22.x
lynx / lynx 2.8.3-dev.23 2.8.3-dev.23.x
lynx / lynx 2.8.3-dev.3 2.8.3-dev.3.x
lynx / lynx 2.8.3-dev.4 2.8.3-dev.4.x
lynx / lynx 2.8.3-dev.5 2.8.3-dev.5.x
lynx / lynx 2.8.3-dev.6 2.8.3-dev.6.x
lynx / lynx 2.8.3-dev.7 2.8.3-dev.7.x
lynx / lynx 2.8.3-dev.8 2.8.3-dev.8.x
lynx / lynx 2.8.3-dev.9 2.8.3-dev.9.x
lynx / lynx 2.8.3-pre1 2.8.3-pre1.x
lynx / lynx 2.8.3-pre2 2.8.3-pre2.x
lynx / lynx 2.8.3-pre3 2.8.3-pre3.x
lynx / lynx 2.8.3-pre4 2.8.3-pre4.x
lynx / lynx 2.8.3-pre5 2.8.3-pre5.x
lynx / lynx 2.8.3-pre6 2.8.3-pre6.x
lynx / lynx 2.8.3-pre7 2.8.3-pre7.x
lynx / lynx 2.8.3-pre8 2.8.3-pre8.x
lynx / lynx 2.8.3-rel1 2.8.3-rel1.x
lynx / lynx 2.8.4-dev1 2.8.4-dev1.x
lynx / lynx 2.8.4-dev10 2.8.4-dev10.x
lynx / lynx 2.8.4-dev11 2.8.4-dev11.x
lynx / lynx 2.8.4-dev12 2.8.4-dev12.x
lynx / lynx 2.8.4-dev13 2.8.4-dev13.x
lynx / lynx 2.8.4-dev14 2.8.4-dev14.x
lynx / lynx 2.8.4-dev15 2.8.4-dev15.x
lynx / lynx 2.8.4-dev16 2.8.4-dev16.x
lynx / lynx 2.8.4-dev17 2.8.4-dev17.x
lynx / lynx 2.8.4-dev18 2.8.4-dev18.x
lynx / lynx 2.8.4-dev19 2.8.4-dev19.x
lynx / lynx 2.8.4-dev2 2.8.4-dev2.x
lynx / lynx 2.8.4-dev20 2.8.4-dev20.x
lynx / lynx 2.8.4-dev21 2.8.4-dev21.x
lynx / lynx 2.8.4-dev3 2.8.4-dev3.x
lynx / lynx 2.8.4-dev4 2.8.4-dev4.x
lynx / lynx 2.8.4-dev5 2.8.4-dev5.x
lynx / lynx 2.8.4-dev6 2.8.4-dev6.x
lynx / lynx 2.8.4-dev7 2.8.4-dev7.x
lynx / lynx 2.8.4-dev8 2.8.4-dev8.x
lynx / lynx 2.8.4-dev9 2.8.4-dev9.x
lynx / lynx 2.8.4-pre.1 2.8.4-pre.1.x
lynx / lynx 2.8.4-pre.2 2.8.4-pre.2.x
lynx / lynx 2.8.4-pre.3 2.8.4-pre.3.x
lynx / lynx 2.8.4-pre.4 2.8.4-pre.4.x
lynx / lynx 2.8.4-pre.5 2.8.4-pre.5.x
lynx / lynx 2.8.4-rel.1 2.8.4-rel.1.x
lynx / lynx 2.8.5-dev.1 2.8.5-dev.1.x
lynx / lynx 2.8.5-dev.10 2.8.5-dev.10.x
lynx / lynx 2.8.5-dev.11 2.8.5-dev.11.x
lynx / lynx 2.8.5-dev.12 2.8.5-dev.12.x
lynx / lynx 2.8.5-dev.13 2.8.5-dev.13.x
lynx / lynx 2.8.5-dev.14 2.8.5-dev.14.x
lynx / lynx 2.8.5-dev.15 2.8.5-dev.15.x
lynx / lynx 2.8.5-dev.16 2.8.5-dev.16.x
lynx / lynx 2.8.5-dev.17 2.8.5-dev.17.x
lynx / lynx 2.8.5-dev.2 2.8.5-dev.2.x
lynx / lynx 2.8.5-dev.3 2.8.5-dev.3.x
lynx / lynx 2.8.5-dev.4 2.8.5-dev.4.x
lynx / lynx 2.8.5-dev.5 2.8.5-dev.5.x
lynx / lynx 2.8.5-dev.6 2.8.5-dev.6.x
lynx / lynx 2.8.5-dev.7 2.8.5-dev.7.x
lynx / lynx 2.8.5-dev.8 2.8.5-dev.8.x
lynx / lynx 2.8.5-dev.9 2.8.5-dev.9.x
lynx / lynx 2.8.5-pre.1 2.8.5-pre.1.x
lynx / lynx 2.8.5-pre.2 2.8.5-pre.2.x
lynx / lynx 2.8.5-pre.3 2.8.5-pre.3.x
lynx / lynx 2.8.5-pre.4 2.8.5-pre.4.x
lynx / lynx 2.8.5-pre.5 2.8.5-pre.5.x
lynx / lynx 2.8.5-rel.1 2.8.5-rel.1.x
lynx / lynx 2.8.6-dev1 2.8.6-dev1.x
lynx / lynx 2.8.6-dev10 2.8.6-dev10.x
lynx / lynx 2.8.6-dev11 2.8.6-dev11.x
lynx / lynx 2.8.6-dev12 2.8.6-dev12.x
lynx / lynx 2.8.6-dev13 2.8.6-dev13.x
lynx / lynx 2.8.6-dev14 2.8.6-dev14.x
lynx / lynx 2.8.6-dev2 2.8.6-dev2.x
lynx / lynx 2.8.6-dev3 2.8.6-dev3.x
lynx / lynx 2.8.6-dev4 2.8.6-dev4.x
lynx / lynx 2.8.6-dev5 2.8.6-dev5.x
lynx / lynx 2.8.6-dev6 2.8.6-dev6.x
lynx / lynx 2.8.6-dev7 2.8.6-dev7.x
lynx / lynx 2.8.6-dev8 2.8.6-dev8.x
lynx / lynx 2.8.6-dev9 2.8.6-dev9.x