• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Lynx URI Handlers Arbitrary Command Execution Vulnerability

Solution:
Please see the referenced advisories for more information.

NOTE: The vendor has addressed this issue in Lynx 2.8.6dev15.


MandrakeSoft Linux Mandrake 2008.0 x86_64

• Mandriva lynx-2.8.6-2.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Linux Mandrake 2008.0

• Mandriva lynx-2.8.6-2.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Linux Mandrake 2009.0 x86_64

• Mandriva lynx-2.8.6-2.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Linux Mandrake 2008.1 x86_64

• Mandriva lynx-2.8.6-2.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Linux Mandrake 2008.1

• Mandriva lynx-2.8.6-2.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Linux Mandrake 2009.0

• Mandriva lynx-2.8.6-2.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Corporate Server 4.0

• Mandriva lynx-2.8.5-4.4.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/

Conectiva Linux 10.0

• Conectiva lynx-2.8.5.1-60698U10_2cl.i386.rpm
  version:10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/lynx-2.8.5.1-60698U10_2cl. i386.rpm


• Conectiva lynx-i18n-ca-2.8.5.1-60698U10_2cl.i386.rpm
  Version:10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/lynx-i18n-ca-2.8.5.1-60698 U10_2cl.i386.rpm


• Conectiva lynx-i18n-cs-2.8.5.1-60698U10_2cl.i386.rpm
  Version:10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/lynx-i18n-cs-2.8.5.1-60698 U10_2cl.i386.rpm


• Conectiva lynx-i18n-da-2.8.5.1-60698U10_2cl.i386.rpm
  Version:10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/lynx-i18n-da-2.8.5.1-60698 U10_2cl.i386.rpm


• Conectiva lynx-i18n-es-2.8.5.1-60698U10_2cl.i386.rpm
  Version:10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/lynx-i18n-es-2.8.5.1-60698 U10_2cl.i386.rpm


• Conectiva lynx-i18n-et-2.8.5.1-60698U10_2cl.i386.rpm
  Version:10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/lynx-i18n-et-2.8.5.1-60698 U10_2cl.i386.rpm


• Conectiva lynx-i18n-fr-2.8.5.1-60698U10_2cl.i386.rpm
  Version:10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/lynx-i18n-fr-2.8.5.1-60698 U10_2cl.i386.rpm


• Conectiva lynx-i18n-hu-2.8.5.1-60698U10_2cl.i386.rpm
  Version:10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/lynx-i18n-hu-2.8.5.1-60698 U10_2cl.i386.rpm


• Conectiva lynx-i18n-it-2.8.5.1-60698U10_2cl.i386.rpm
  Version:10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/lynx-i18n-it-2.8.5.1-60698 U10_2cl.i386.rpm


• Conectiva lynx-i18n-ja-2.8.5.1-60698U10_2cl.i386.rpm
  Version:10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/lynx-i18n-ja-2.8.5.1-60698 U10_2cl.i386.rpm


• Conectiva lynx-i18n-nl-2.8.5.1-60698U10_2cl.i386.rpm
  Version:10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/lynx-i18n-nl-2.8.5.1-60698 U10_2cl.i386.rpm


• Conectiva lynx-i18n-pt_BR-2.8.5.1-60698U10_2cl.i386.rpm
  Version:10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/lynx-i18n-pt_BR-2.8.5.1-60 698U10_2cl.i386.rpm


• Conectiva lynx-i18n-ru-2.8.5.1-60698U10_2cl.i386.rpm
  Version:10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/lynx-i18n-ru-2.8.5.1-60698 U10_2cl.i386.rpm


• Conectiva lynx-i18n-sl-2.8.5.1-60698U10_2cl.i386.rpm
  Version:10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/lynx-i18n-sl-2.8.5.1-60698 U10_2cl.i386.rpm


• Conectiva lynx-i18n-sv-2.8.5.1-60698U10_2cl.i386.rpm
  Version:10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/lynx-i18n-sv-2.8.5.1-60698 U10_2cl.i386.rpm


• Conectiva lynx-i18n-tr-2.8.5.1-60698U10_2cl.i386.rpm
  Version:10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/lynx-i18n-tr-2.8.5.1-60698 U10_2cl.i386.rpm


• Conectiva lynx-i18n-uk-2.8.5.1-60698U10_2cl.i386.rpm
  Version:10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/lynx-i18n-uk-2.8.5.1-60698 U10_2cl.i386.rpm


• Conectiva lynx-i18n-zh_CN-2.8.5.1-60698U10_2cl.i386.rpm
  Version:10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/lynx-i18n-zh_CN-2.8.5.1-60 698U10_2cl.i386.rpm


• Conectiva lynx-i18n-zh_TW-2.8.5.1-60698U10_2cl.i386.rpm
  Version:10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/lynx-i18n-zh_TW-2.8.5.1-60 698U10_2cl.i386.rpm

MandrakeSoft Multi Network Firewall 2.0

• Mandriva lynx-2.8.5-1.4.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/

Trustix Secure Linux 2.2

• Trustix lynx-2.8.5-4tr.i586.rpm
  Trustix Secure Linux 2.2
  ftp://ftp.trustix.org/pub/trustix/updates/

University of Kansas Lynx 2.7

• University of Kansas lynx2.8.6dev.15.tar.gz
  http://lynx.isc.org/current/lynx2.8.6dev.15.tar.gz

University of Kansas Lynx 2.8

• University of Kansas lynx2.8.6dev.15.tar.gz
  http://lynx.isc.org/current/lynx2.8.6dev.15.tar.gz

University of Kansas Lynx 2.8.1

• University of Kansas lynx2.8.6dev.15.tar.gz
  http://lynx.isc.org/current/lynx2.8.6dev.15.tar.gz

University of Kansas Lynx 2.8.2 rel.1

• University of Kansas lynx2.8.6dev.15.tar.gz
  http://lynx.isc.org/current/lynx2.8.6dev.15.tar.gz

University of Kansas Lynx 2.8.3 dev2x

• University of Kansas lynx2.8.6dev.15.tar.gz
  http://lynx.isc.org/current/lynx2.8.6dev.15.tar.gz

University of Kansas Lynx 2.8.3 dev.22

• University of Kansas lynx2.8.6dev.15.tar.gz
  http://lynx.isc.org/current/lynx2.8.6dev.15.tar.gz

University of Kansas Lynx 2.8.3

• University of Kansas lynx2.8.6dev.15.tar.gz
  http://lynx.isc.org/current/lynx2.8.6dev.15.tar.gz

University of Kansas Lynx 2.8.3 rel.1

• University of Kansas lynx2.8.6dev.15.tar.gz
  http://lynx.isc.org/current/lynx2.8.6dev.15.tar.gz

University of Kansas Lynx 2.8.3 pre.5

• University of Kansas lynx2.8.6dev.15.tar.gz
  http://lynx.isc.org/current/lynx2.8.6dev.15.tar.gz

University of Kansas Lynx 2.8.4

• RedHat Fedora lynx-2.8.4-18.3.legacy.i386.rpm
  Red Hat Linux 7.3:
  http://download.fedoralegacy.org/redhat/7.3/updates/i386/


• University of Kansas lynx2.8.6dev.15.tar.gz
  http://lynx.isc.org/current/lynx2.8.6dev.15.tar.gz

University of Kansas Lynx 2.8.4 rel.1

• University of Kansas lynx2.8.6dev.15.tar.gz
  http://lynx.isc.org/current/lynx2.8.6dev.15.tar.gz

University of Kansas Lynx 2.8.5 dev.8

• University of Kansas lynx2.8.6dev.15.tar.gz
  http://lynx.isc.org/current/lynx2.8.6dev.15.tar.gz

University of Kansas Lynx 2.8.5 dev.5

• University of Kansas lynx2.8.6dev.15.tar.gz
  http://lynx.isc.org/current/lynx2.8.6dev.15.tar.gz

University of Kansas Lynx 2.8.5 dev.4

• University of Kansas lynx2.8.6dev.15.tar.gz
  http://lynx.isc.org/current/lynx2.8.6dev.15.tar.gz

University of Kansas Lynx 2.8.5

• Mandriva lynx-2.8.5-0.10.4.C21mdk.dev.8.i586.rpm
  Corporate Server 2.1:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva lynx-2.8.5-0.10.4.C21mdk.dev.8.x86_64.rpm
  Corporate Server 2.1/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva lynx-2.8.5-1.3.101mdk.i586.rpm
  Mandriva Linux 10.1:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva lynx-2.8.5-1.3.101mdk.x86_64.rpm
  Mandriva Linux 10.1/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva lynx-2.8.5-1.3.102mdk.i586.rpm
  Mandriva Linux 10.2:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva lynx-2.8.5-1.3.102mdk.x86_64.rpm
  Mandriva Linux 10.2/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva lynx-2.8.5-1.3.C30mdk.i586.rpm
  Corporate 3.0:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva lynx-2.8.5-1.3.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva lynx-2.8.5-1.3.M20mdk.i586.rpm
  Multi Network Firewall 2.0:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva lynx-2.8.5-4.3.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva lynx-2.8.5-4.3.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• RedHat Fedora lynx-2.8.5-11.2.legacy.i386.rpm
  Red Hat Linux 9.0:
  http://download.fedoralegacy.org/redhat/9/updates/i386/


• RedHat Fedora lynx-2.8.5-13.2.legacy.i386.rpm
  Fedora Core 1:
  http://download.fedoralegacy.org/fedora/1/updates/i386/lynx-2.8.5-13.2 .legacy.i386.rpm


• RedHat Fedora lynx-2.8.5-15.2.legacy.i386.rpm
  Fedora Core 2:
  http://download.fedoralegacy.org/fedora/2/updates/i386/


• Trustix lynx-2.8.5-4tr.i586.rpm
  Trustix Secure Linux 2.2
  ftp://ftp.trustix.org/pub/trustix/updates/


• University of Kansas lynx2.8.6dev.15.tar.gz
  http://lynx.isc.org/current/lynx2.8.6dev.15.tar.gz

University of Kansas Lynx 2.8.5 dev.3

• University of Kansas lynx2.8.6dev.15.tar.gz
  http://lynx.isc.org/current/lynx2.8.6dev.15.tar.gz

University of Kansas Lynx 2.8.5 dev.2

• University of Kansas lynx2.8.6dev.15.tar.gz
  http://lynx.isc.org/current/lynx2.8.6dev.15.tar.gz

University of Kansas Lynx 2.8.6 dev3

• University of Kansas lynx2.8.6dev.15.tar.gz
  http://lynx.isc.org/current/lynx2.8.6dev.15.tar.gz

University of Kansas Lynx 2.8.6 dev2

• University of Kansas lynx2.8.6dev.15.tar.gz
  http://lynx.isc.org/current/lynx2.8.6dev.15.tar.gz

University of Kansas Lynx 2.8.6 dev4

• University of Kansas lynx2.8.6dev.15.tar.gz
  http://lynx.isc.org/current/lynx2.8.6dev.15.tar.gz

University of Kansas Lynx 2.8.6 dev1

• University of Kansas lynx2.8.6dev.15.tar.gz
  http://lynx.isc.org/current/lynx2.8.6dev.15.tar.gz

University of Kansas Lynx 2.8.6 dev10

• University of Kansas lynx2.8.6dev.15.tar.gz
  http://lynx.isc.org/current/lynx2.8.6dev.15.tar.gz

University of Kansas Lynx 2.8.6 dev14

• University of Kansas lynx2.8.6dev.15.tar.gz
  http://lynx.isc.org/current/lynx2.8.6dev.15.tar.gz

University of Kansas Lynx 2.8.6 dev7

• University of Kansas lynx2.8.6dev.15.tar.gz
  http://lynx.isc.org/current/lynx2.8.6dev.15.tar.gz

University of Kansas Lynx 2.8.6 dev8

• University of Kansas lynx2.8.6dev.15.tar.gz
  http://lynx.isc.org/current/lynx2.8.6dev.15.tar.gz

University of Kansas Lynx 2.8.6 dev9

• University of Kansas lynx2.8.6dev.15.tar.gz
  http://lynx.isc.org/current/lynx2.8.6dev.15.tar.gz

University of Kansas Lynx 2.8.6 dev13

• University of Kansas lynx2.8.6dev.15.tar.gz
  http://lynx.isc.org/current/lynx2.8.6dev.15.tar.gz

University of Kansas Lynx 2.8.6 dev6

• University of Kansas lynx2.8.6dev.15.tar.gz
  http://lynx.isc.org/current/lynx2.8.6dev.15.tar.gz

University of Kansas Lynx 2.8.6 dev12

• University of Kansas lynx2.8.6dev.15.tar.gz
  http://lynx.isc.org/current/lynx2.8.6dev.15.tar.gz

University of Kansas Lynx 2.8.6 dev11

• University of Kansas lynx2.8.6dev.15.tar.gz
  http://lynx.isc.org/current/lynx2.8.6dev.15.tar.gz

University of Kansas Lynx 2.8.6 dev5

• University of Kansas lynx2.8.6dev.15.tar.gz
  http://lynx.isc.org/current/lynx2.8.6dev.15.tar.gz

MandrakeSoft Corporate Server 3.0

• Mandriva lynx-2.8.5-1.4.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Corporate Server 3.0 x86_64

• Mandriva lynx-2.8.5-1.4.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Corporate Server 4.0 x86_64

• Mandriva lynx-2.8.5-4.4.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/