CVE-2006-5925

Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code via shell metacharacters in an smb:// URI, as demonstrated by using PUT and GET statements.

🔗 References (56)

• secalert@redhathttp://bugzilla.elinks.cz/show_bug.cgi?id=841
• secalert@redhathttp://marc.info/?l=full-disclosure&m=116355556512780&w=2
• secalert@redhathttp://secunia.com/advisories/22905
• secalert@redhathttp://secunia.com/advisories/22920
• secalert@redhathttp://secunia.com/advisories/22923
• secalert@redhathttp://secunia.com/advisories/23022
• secalert@redhathttp://secunia.com/advisories/23132
• secalert@redhathttp://secunia.com/advisories/23188
• secalert@redhathttp://secunia.com/advisories/23234
• secalert@redhathttp://secunia.com/advisories/23389
• secalert@redhathttp://secunia.com/advisories/23467
• secalert@redhathttp://secunia.com/advisories/24005
• secalert@redhathttp://secunia.com/advisories/24054
• secalert@redhathttp://security.gentoo.org/glsa/glsa-200612-16.xml
• secalert@redhathttp://securitytracker.com/id?1017232