CVE-2006-5925: High severity ELinks Elinks vulnerability
Published Nov 15, 2006
·Updated
Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code via shell metacharacters in an smb:// URI, as demonstrated by using PUT and GET statements.
Affected Software
4 affected componentsFixes available
debian/elinks
0.13~20190125-30.13.2-10.16.1.1-4
debian/links2
2.18-22.21-12.28-12.29-1
ELinks Elinks=0.9.2
Links Links=1.00pre12
Event History
Nov 15, 2006
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Data Sourced
via NVD·07:07 PM
DescriptionSeverityAffected Software
Nov 18, 2006
Data Sourced
12:03 PM
SeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2006-5925?
CVE-2006-5925 has been categorized as a high-severity vulnerability due to its potential to allow remote code execution.
2
How do I fix CVE-2006-5925?
To remediate CVE-2006-5925, users should upgrade to the latest patched versions of affected software like elinks or links2.
3
Which versions of Links are affected by CVE-2006-5925?
CVE-2006-5925 specifically affects Links version 1.00pre12.
4
Which versions of Elinks are affected by CVE-2006-5925?
Elinks version 0.9.2 is known to be vulnerable to CVE-2006-5925.
5
Can CVE-2006-5925 be exploited through smb:// URIs?
Yes, CVE-2006-5925 can be exploited via malicious smb:// URIs utilizing shell metacharacters.