PT-2003-1028 · Lynx · Lynx

Publicado 2003-01-28 · Atualizado 2016-10-18 · CVE-2002-1405

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Lynx versions 2.8.4 and earlier

Description The issue allows remote attackers to inject false HTTP headers into an HTTP request, potentially leading to the disruption of protected information integrity. This can be achieved via a URL containing encoded carriage return, line feed, and other whitespace characters. The exploitation of this issue can be performed remotely.

Recommendations For Lynx versions 2.8.4 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

BDU:2015-03456

BDU:2015-07925

BDU:2015-07926

CVE-2002-1405

DSA-210

Produtos afetados

Lynx

Referências · 21

• 🔥 https://exploit-db.com/exploits/21722 · Exploit
• http://redhat.com/support/errata/RHSA-2003-029.html · Aviso do Fabricante
• http://debian.org/security/2002/dsa-210 · Aviso do Fabricante
• http://securityfocus.com/bid/5499 · Nota
• http://marc.info/?l=bugtraq&m=103003793418021&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1405 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=102978118411977&w=2 · Nota
• http://mandrakesoft.com/security/advisories?name=MDKSA-2003:023 · Aviso do Fabricante
• https://rhn.redhat.com/errata/RHSA-2003-029.html · Nota
• https://bdu.fstec.ru/vul/2015-07926 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-07925 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2002-1405 · Aviso do Fabricante
• http://trustix.net/errata/misc/2002/TSL-2002-0085-lynx-ssl.asc.txt · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2002-1405 · Aviso do Fabricante
• ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-049.0.txt · Aviso do Fabricante