Vulnerability Details : CVE-2006-5925
Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code via shell metacharacters in an smb:// URI, as demonstrated by using PUT and GET statements.
Vulnerability category: Execute code
Products affected by CVE-2006-5925
- cpe:2.3:a:elinks:elinks:0.9.2:*:*:*:*:*:*:*
- cpe:2.3:a:links:links:1.00pre12:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2006-5925
84.30%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 98 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2006-5925
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST |
References for CVE-2006-5925
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/30299
Links smbclient command execution CVE-2006-5925 Vulnerability Report
-
http://security.gentoo.org/glsa/glsa-200612-16.xml
Links: Arbitrary Samba command execution (GLSA 200612-16) — Gentoo security
-
http://bugzilla.elinks.cz/show_bug.cgi?id=841
403 Forbidden
-
http://www.gentoo.org/security/en/glsa/glsa-200701-27.xml
ELinks: Arbitrary Samba command execution (GLSA 200701-27) — Gentoo security
-
http://www.novell.com/linux/security/advisories/2006_27_sr.html
404 Page Not Found | SUSE
-
http://marc.info/?l=full-disclosure&m=116355556512780&w=2
'[Full-disclosure] Links smbclient command execution' - MARC
-
http://www.debian.org/security/2006/dsa-1240
[SECURITY] [DSA-1240-1] New links2 packages fix arbitrary shell command execution
-
https://www.debian.org/security/2006/dsa-1226
Debian -- Security Information -- DSA-1226-1 links
-
http://www.securityfocus.com/archive/1/451870/100/200/threaded
-
http://securitytracker.com/id?1017232
Access Denied
-
http://www.debian.org/security/2006/dsa-1228
[SECURITY] [DSA 1228-1] New elinks packages fix arbitrary shell command execution
-
http://securitytracker.com/id?1017233
Access Denied
-
http://www.securityfocus.com/bid/21082
-
http://www.mandriva.com/security/advisories?name=MDKSA-2006:216
Mandriva
-
http://www.trustix.org/errata/2007/0005
Trustix | Empowering Trust and Security in the Digital Age
-
http://www.redhat.com/support/errata/RHSA-2006-0742.html
Support
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11213
404 Not Found
Jump to