Description (CNA)
Untrusted search path vulnerability in Lynx before 2.8.6rel.4 allows local users to execute arbitrary code via malicious (1) .mailcap and (2) mime.types files in the current working directory.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.openwall.com/lists/oss-security/2008/10/25/3
- http://www.securityfocus.com/bid/31917
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9719
- https://bugzilla.redhat.com/show_bug.cgi?id=214205
- http://www.redhat.com/support/errata/RHSA-2008-0965.html
- http://www.securitytracker.com/id?1021107
- http://secunia.com/advisories/32407
- http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html
- http://secunia.com/advisories/33568
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:217
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=396949
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46132
- http://secunia.com/advisories/32416
ADP enrichment
No English description supplied.
- http://www.openwall.com/lists/oss-security/2008/10/25/3
- http://www.securityfocus.com/bid/31917
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9719
- https://bugzilla.redhat.com/show_bug.cgi?id=214205
- http://www.redhat.com/support/errata/RHSA-2008-0965.html
- http://www.securitytracker.com/id?1021107
- http://secunia.com/advisories/32407
- http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html
- http://secunia.com/advisories/33568
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:217
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=396949
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46132
- http://secunia.com/advisories/32416