PT-1999-1782 · Lynx · Lynx

Published 1999-11-16 · Updated 2024-02-08 · CVE-1999-1549

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Lynx versions 2.x

Description: The issue arises from Lynx not properly distinguishing between internal and external HTML. This may allow a local attacker to read a "secure" hidden form value from a temporary file and craft a LYNXOPTIONS: URL that causes Lynx to modify the user's configuration file and execute commands.

Recommendations: For Lynx versions 2.x, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Origin Validation Error

Weakness Enumeration

CWE-346

Related Identifiers

CVE-1999-1549

Affected Products

Lynx

References · 4

• 🔥 http://marc.info/?l=bugtraq&m=94286509804526&w=2 · Exploit
• 🔥 http://securityfocus.com/bid/804 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-1999-1549 · Security Note
• https://t.me/cvenotify/70656 · Telegram Post