CVE-2006-7234
First published: Tue Oct 03 2006(Updated: )
Untrusted search path vulnerability in Lynx before 2.8.6rel.4 allows local users to execute arbitrary code via malicious (1) .mailcap and (2) mime.types files in the current working directory.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/lynx | <0:2.8.5-18.2.el4_7.1 | 0:2.8.5-18.2.el4_7.1 |
| redhat/lynx | <0:2.8.5-28.1.el5_2.1 | 0:2.8.5-28.1.el5_2.1 |
| Lynx | <=2.8.6 | |
| Lynx | =2.8.1-dev.1 | |
| Lynx | =2.8.1-dev.10 | |
| Lynx | =2.8.1-dev.11 | |
| Lynx | =2.8.1-dev.12 | |
| Lynx | =2.8.1-dev.13 | |
| Lynx | =2.8.1-dev.14 | |
| Lynx | =2.8.1-dev.15 | |
| Lynx | =2.8.1-dev.16 | |
| Lynx | =2.8.1-dev.17 | |
| Lynx | =2.8.1-dev.18 | |
| Lynx | =2.8.1-dev.19 | |
| Lynx | =2.8.1-dev.2 | |
| Lynx | =2.8.1-dev.20 | |
| Lynx | =2.8.1-dev.21 | |
| Lynx | =2.8.1-dev.22 | |
| Lynx | =2.8.1-dev.23 | |
| Lynx | =2.8.1-dev.24 | |
| Lynx | =2.8.1-dev.26 | |
| Lynx | =2.8.1-dev.27 | |
| Lynx | =2.8.1-dev.28 | |
| Lynx | =2.8.1-dev.29 | |
| Lynx | =2.8.1-dev.3 | |
| Lynx | =2.8.1-dev.4 | |
| Lynx | =2.8.1-dev.5 | |
| Lynx | =2.8.1-dev.6 | |
| Lynx | =2.8.1-dev.7 | |
| Lynx | =2.8.1-dev.8 | |
| Lynx | =2.8.1-dev.9 | |
| Lynx | =2.8.1-pre.1 | |
| Lynx | =2.8.1-pre.10 | |
| Lynx | =2.8.1-pre.11 | |
| Lynx | =2.8.1-pre.2 | |
| Lynx | =2.8.1-pre.3 | |
| Lynx | =2.8.1-pre.4 | |
| Lynx | =2.8.1-pre.5 | |
| Lynx | =2.8.1-pre.6 | |
| Lynx | =2.8.1-pre.7 | |
| Lynx | =2.8.1-pre.8 | |
| Lynx | =2.8.1-pre.9 | |
| Lynx | =2.8.1-rel.1 | |
| Lynx | =2.8.1-rel.2 | |
| Lynx | =2.8.2-dev.1 | |
| Lynx | =2.8.2-dev.10 | |
| Lynx | =2.8.2-dev.11 | |
| Lynx | =2.8.2-dev.12 | |
| Lynx | =2.8.2-dev.13 | |
| Lynx | =2.8.2-dev.14 | |
| Lynx | =2.8.2-dev.15 | |
| Lynx | =2.8.2-dev.16 | |
| Lynx | =2.8.2-dev.17 | |
| Lynx | =2.8.2-dev.18 | |
| Lynx | =2.8.2-dev.19 | |
| Lynx | =2.8.2-dev.2 | |
| Lynx | =2.8.2-dev.20 | |
| Lynx | =2.8.2-dev.21 | |
| Lynx | =2.8.2-dev.22 | |
| Lynx | =2.8.2-dev.23 | |
| Lynx | =2.8.2-dev.24 | |
| Lynx | =2.8.2-dev.25 | |
| Lynx | =2.8.2-dev.26 | |
| Lynx | =2.8.2-dev.3 | |
| Lynx | =2.8.2-dev.4 | |
| Lynx | =2.8.2-dev.5 | |
| Lynx | =2.8.2-dev.6 | |
| Lynx | =2.8.2-dev.7 | |
| Lynx | =2.8.2-dev.8 | |
| Lynx | =2.8.2-dev.9 | |
| Lynx | =2.8.2-pre.1 | |
| Lynx | =2.8.2-pre.10 | |
| Lynx | =2.8.2-pre.11 | |
| Lynx | =2.8.2-pre.2 | |
| Lynx | =2.8.2-pre.3 | |
| Lynx | =2.8.2-pre.4 | |
| Lynx | =2.8.2-pre.5 | |
| Lynx | =2.8.2-pre.6 | |
| Lynx | =2.8.2-pre.7 | |
| Lynx | =2.8.2-pre.8 | |
| Lynx | =2.8.2-pre.9 | |
| Lynx | =2.8.2-rel.1 | |
| Lynx | =2.8.3-dev.1 | |
| Lynx | =2.8.3-dev.10 | |
| Lynx | =2.8.3-dev.11 | |
| Lynx | =2.8.3-dev.12 | |
| Lynx | =2.8.3-dev.13 | |
| Lynx | =2.8.3-dev.14 | |
| Lynx | =2.8.3-dev.15 | |
| Lynx | =2.8.3-dev.16 | |
| Lynx | =2.8.3-dev.17 | |
| Lynx | =2.8.3-dev.18 | |
| Lynx | =2.8.3-dev.19 | |
| Lynx | =2.8.3-dev.2 | |
| Lynx | =2.8.3-dev.20 | |
| Lynx | =2.8.3-dev.21 | |
| Lynx | =2.8.3-dev.22 | |
| Lynx | =2.8.3-dev.23 | |
| Lynx | =2.8.3-dev.3 | |
| Lynx | =2.8.3-dev.4 | |
| Lynx | =2.8.3-dev.5 | |
| Lynx | =2.8.3-dev.6 | |
| Lynx | =2.8.3-dev.7 | |
| Lynx | =2.8.3-dev.8 | |
| Lynx | =2.8.3-dev.9 | |
| Lynx | =2.8.3-pre1 | |
| Lynx | =2.8.3-pre2 | |
| Lynx | =2.8.3-pre3 | |
| Lynx | =2.8.3-pre4 | |
| Lynx | =2.8.3-pre5 | |
| Lynx | =2.8.3-pre6 | |
| Lynx | =2.8.3-pre7 | |
| Lynx | =2.8.3-pre8 | |
| Lynx | =2.8.3-rel1 | |
| Lynx | =2.8.4-dev1 | |
| Lynx | =2.8.4-dev10 | |
| Lynx | =2.8.4-dev11 | |
| Lynx | =2.8.4-dev12 | |
| Lynx | =2.8.4-dev13 | |
| Lynx | =2.8.4-dev14 | |
| Lynx | =2.8.4-dev15 | |
| Lynx | =2.8.4-dev16 | |
| Lynx | =2.8.4-dev17 | |
| Lynx | =2.8.4-dev18 | |
| Lynx | =2.8.4-dev19 | |
| Lynx | =2.8.4-dev2 | |
| Lynx | =2.8.4-dev20 | |
| Lynx | =2.8.4-dev21 | |
| Lynx | =2.8.4-dev3 | |
| Lynx | =2.8.4-dev4 | |
| Lynx | =2.8.4-dev5 | |
| Lynx | =2.8.4-dev6 | |
| Lynx | =2.8.4-dev7 | |
| Lynx | =2.8.4-dev8 | |
| Lynx | =2.8.4-dev9 | |
| Lynx | =2.8.4-pre.1 | |
| Lynx | =2.8.4-pre.2 | |
| Lynx | =2.8.4-pre.3 | |
| Lynx | =2.8.4-pre.4 | |
| Lynx | =2.8.4-pre.5 | |
| Lynx | =2.8.4-rel.1 | |
| Lynx | =2.8.5-dev.1 | |
| Lynx | =2.8.5-dev.10 | |
| Lynx | =2.8.5-dev.11 | |
| Lynx | =2.8.5-dev.12 | |
| Lynx | =2.8.5-dev.13 | |
| Lynx | =2.8.5-dev.14 | |
| Lynx | =2.8.5-dev.15 | |
| Lynx | =2.8.5-dev.16 | |
| Lynx | =2.8.5-dev.17 | |
| Lynx | =2.8.5-dev.2 | |
| Lynx | =2.8.5-dev.3 | |
| Lynx | =2.8.5-dev.4 | |
| Lynx | =2.8.5-dev.5 | |
| Lynx | =2.8.5-dev.6 | |
| Lynx | =2.8.5-dev.7 | |
| Lynx | =2.8.5-dev.8 | |
| Lynx | =2.8.5-dev.9 | |
| Lynx | =2.8.5-pre.1 | |
| Lynx | =2.8.5-pre.2 | |
| Lynx | =2.8.5-pre.3 | |
| Lynx | =2.8.5-pre.4 | |
| Lynx | =2.8.5-pre.5 | |
| Lynx | =2.8.5-rel.1 | |
| Lynx | =2.8.6-dev1 | |
| Lynx | =2.8.6-dev10 | |
| Lynx | =2.8.6-dev11 | |
| Lynx | =2.8.6-dev12 | |
| Lynx | =2.8.6-dev13 | |
| Lynx | =2.8.6-dev14 | |
| Lynx | =2.8.6-dev15 | |
| Lynx | =2.8.6-dev2 | |
| Lynx | =2.8.6-dev3 | |
| Lynx | =2.8.6-dev4 | |
| Lynx | =2.8.6-dev5 | |
| Lynx | =2.8.6-dev6 | |
| Lynx | =2.8.6-dev7 | |
| Lynx | =2.8.6-dev8 | |
| Lynx | =2.8.6-dev9 | |
| Lynx | =2.8.6-rel1 | |
| Lynx | =2.8.6-rel2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.openwall.com/lists/oss-security/2008/10/25/3
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=396949
- https://bugzilla.redhat.com/show_bug.cgi?id=214205
- http://www.securitytracker.com/id?1021107
- http://secunia.com/advisories/32407
- http://www.securityfocus.com/bid/31917
- http://www.redhat.com/support/errata/RHSA-2008-0965.html
- http://secunia.com/advisories/32416
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:217
- http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html
- http://secunia.com/advisories/33568
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46132
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9719
- http://lynx.isc.org/lynx2.8.6/patches/
- http://lynx.isc.org/lynx2.8.5/patches/
- http://lynx.isc.org/lynx2.8.4/patches/
- https://bugzilla.redhat.com/show_bug.cgi/ftp:/lynx.isc.org/lynx2.8.5/patches/2.8.5rel.6.patch.gz
- https://bugzilla.redhat.com/show_bug.cgi/ftp:/lynx.isc.org/lynx2.8.4/patches/lynx2.8.4rel.1e.patch
- https://access.redhat.com/security/cve/CVE-2006-7234
- http://rhn.redhat.com/errata/RHSA-2008-0965.html
- https://www.cve.org/CVERecord?id=CVE-2006-7234 https://nvd.nist.gov/vuln/detail/CVE-2006-7234
- https://access.redhat.com/errata/RHSA-2008:0965
- https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7234.json
Frequently Asked Questions
What is the severity of CVE-2006-7234?
CVE-2006-7234 has a medium severity rating as it allows local users to execute arbitrary code.
How do I fix CVE-2006-7234?
To fix CVE-2006-7234, update Lynx to version 2.8.6rel.4 or later.
Which Lynx versions are affected by CVE-2006-7234?
CVE-2006-7234 affects Lynx versions before 2.8.6rel.4.
How does CVE-2006-7234 exploit untrusted search paths?
CVE-2006-7234 exploits untrusted search paths by allowing malicious .mailcap and mime.types files in the working directory to execute code.
Who is impacted by CVE-2006-7234?
Local users on systems running vulnerable versions of Lynx are impacted by CVE-2006-7234.
- agent/type
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2006-7234
- agent/weakness
- agent/severity
- agent/author
- agent/references
- agent/description
- collector/redhat-cve
- agent/software-canonical-lookup
- agent/event
- agent/trending
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/lynx
- product/lynx
- canonical/lynx lynx
- package-manager/redhat
- canonical/lynx
- version/lynx/2.8.6
- version/lynx/2.8.1-dev.1
- version/lynx/2.8.1-dev.10
- version/lynx/2.8.1-dev.11
- version/lynx/2.8.1-dev.12
- version/lynx/2.8.1-dev.13
- version/lynx/2.8.1-dev.14
- version/lynx/2.8.1-dev.15
- version/lynx/2.8.1-dev.16
- version/lynx/2.8.1-dev.17
- version/lynx/2.8.1-dev.18
- version/lynx/2.8.1-dev.19
- version/lynx/2.8.1-dev.2
- version/lynx/2.8.1-dev.20
- version/lynx/2.8.1-dev.21
- version/lynx/2.8.1-dev.22
- version/lynx/2.8.1-dev.23
- version/lynx/2.8.1-dev.24
- version/lynx/2.8.1-dev.26
- version/lynx/2.8.1-dev.27
- version/lynx/2.8.1-dev.28
- version/lynx/2.8.1-dev.29
- version/lynx/2.8.1-dev.3
- version/lynx/2.8.1-dev.4
- version/lynx/2.8.1-dev.5
- version/lynx/2.8.1-dev.6
- version/lynx/2.8.1-dev.7
- version/lynx/2.8.1-dev.8
- version/lynx/2.8.1-dev.9
- version/lynx/2.8.1-pre.1
- version/lynx/2.8.1-pre.10
- version/lynx/2.8.1-pre.11
- version/lynx/2.8.1-pre.2
- version/lynx/2.8.1-pre.3
- version/lynx/2.8.1-pre.4
- version/lynx/2.8.1-pre.5
- version/lynx/2.8.1-pre.6
- version/lynx/2.8.1-pre.7
- version/lynx/2.8.1-pre.8
- version/lynx/2.8.1-pre.9
- version/lynx/2.8.1-rel.1
- version/lynx/2.8.1-rel.2
- version/lynx/2.8.2-dev.1
- version/lynx/2.8.2-dev.10
- version/lynx/2.8.2-dev.11
- version/lynx/2.8.2-dev.12
- version/lynx/2.8.2-dev.13
- version/lynx/2.8.2-dev.14
- version/lynx/2.8.2-dev.15
- version/lynx/2.8.2-dev.16
- version/lynx/2.8.2-dev.17
- version/lynx/2.8.2-dev.18
- version/lynx/2.8.2-dev.19
- version/lynx/2.8.2-dev.2
- version/lynx/2.8.2-dev.20
- version/lynx/2.8.2-dev.21
- version/lynx/2.8.2-dev.22
- version/lynx/2.8.2-dev.23
- version/lynx/2.8.2-dev.24
- version/lynx/2.8.2-dev.25
- version/lynx/2.8.2-dev.26
- version/lynx/2.8.2-dev.3
- version/lynx/2.8.2-dev.4
- version/lynx/2.8.2-dev.5
- version/lynx/2.8.2-dev.6
- version/lynx/2.8.2-dev.7
- version/lynx/2.8.2-dev.8
- version/lynx/2.8.2-dev.9
- version/lynx/2.8.2-pre.1
- version/lynx/2.8.2-pre.10
- version/lynx/2.8.2-pre.11
- version/lynx/2.8.2-pre.2
- version/lynx/2.8.2-pre.3
- version/lynx/2.8.2-pre.4
- version/lynx/2.8.2-pre.5
- version/lynx/2.8.2-pre.6
- version/lynx/2.8.2-pre.7
- version/lynx/2.8.2-pre.8
- version/lynx/2.8.2-pre.9
- version/lynx/2.8.2-rel.1
- version/lynx/2.8.3-dev.1
- version/lynx/2.8.3-dev.10
- version/lynx/2.8.3-dev.11
- version/lynx/2.8.3-dev.12
- version/lynx/2.8.3-dev.13
- version/lynx/2.8.3-dev.14
- version/lynx/2.8.3-dev.15
- version/lynx/2.8.3-dev.16
- version/lynx/2.8.3-dev.17
- version/lynx/2.8.3-dev.18
- version/lynx/2.8.3-dev.19
- version/lynx/2.8.3-dev.2
- version/lynx/2.8.3-dev.20
- version/lynx/2.8.3-dev.21
- version/lynx/2.8.3-dev.22
- version/lynx/2.8.3-dev.23
- version/lynx/2.8.3-dev.3
- version/lynx/2.8.3-dev.4
- version/lynx/2.8.3-dev.5
- version/lynx/2.8.3-dev.6
- version/lynx/2.8.3-dev.7
- version/lynx/2.8.3-dev.8
- version/lynx/2.8.3-dev.9
- version/lynx/2.8.3-pre1
- version/lynx/2.8.3-pre2
- version/lynx/2.8.3-pre3
- version/lynx/2.8.3-pre4
- version/lynx/2.8.3-pre5
- version/lynx/2.8.3-pre6
- version/lynx/2.8.3-pre7
- version/lynx/2.8.3-pre8
- version/lynx/2.8.3-rel1
- version/lynx/2.8.4-dev1
- version/lynx/2.8.4-dev10
- version/lynx/2.8.4-dev11
- version/lynx/2.8.4-dev12
- version/lynx/2.8.4-dev13
- version/lynx/2.8.4-dev14
- version/lynx/2.8.4-dev15
- version/lynx/2.8.4-dev16
- version/lynx/2.8.4-dev17
- version/lynx/2.8.4-dev18
- version/lynx/2.8.4-dev19
- version/lynx/2.8.4-dev2
- version/lynx/2.8.4-dev20
- version/lynx/2.8.4-dev21
- version/lynx/2.8.4-dev3
- version/lynx/2.8.4-dev4
- version/lynx/2.8.4-dev5
- version/lynx/2.8.4-dev6
- version/lynx/2.8.4-dev7
- version/lynx/2.8.4-dev8
- version/lynx/2.8.4-dev9
- version/lynx/2.8.4-pre.1
- version/lynx/2.8.4-pre.2
- version/lynx/2.8.4-pre.3
- version/lynx/2.8.4-pre.4
- version/lynx/2.8.4-pre.5
- version/lynx/2.8.4-rel.1
- version/lynx/2.8.5-dev.1
- version/lynx/2.8.5-dev.10
- version/lynx/2.8.5-dev.11
- version/lynx/2.8.5-dev.12
- version/lynx/2.8.5-dev.13
- version/lynx/2.8.5-dev.14
- version/lynx/2.8.5-dev.15
- version/lynx/2.8.5-dev.16
- version/lynx/2.8.5-dev.17
- version/lynx/2.8.5-dev.2
- version/lynx/2.8.5-dev.3
- version/lynx/2.8.5-dev.4
- version/lynx/2.8.5-dev.5
- version/lynx/2.8.5-dev.6
- version/lynx/2.8.5-dev.7
- version/lynx/2.8.5-dev.8
- version/lynx/2.8.5-dev.9
- version/lynx/2.8.5-pre.1
- version/lynx/2.8.5-pre.2
- version/lynx/2.8.5-pre.3
- version/lynx/2.8.5-pre.4
- version/lynx/2.8.5-pre.5
- version/lynx/2.8.5-rel.1
- version/lynx/2.8.6-dev1
- version/lynx/2.8.6-dev10
- version/lynx/2.8.6-dev11
- version/lynx/2.8.6-dev12
- version/lynx/2.8.6-dev13
- version/lynx/2.8.6-dev14
- version/lynx/2.8.6-dev15
- version/lynx/2.8.6-dev2
- version/lynx/2.8.6-dev3
- version/lynx/2.8.6-dev4
- version/lynx/2.8.6-dev5
- version/lynx/2.8.6-dev6
- version/lynx/2.8.6-dev7
- version/lynx/2.8.6-dev8
- version/lynx/2.8.6-dev9
- version/lynx/2.8.6-rel1
- version/lynx/2.8.6-rel2