CVE-2005-2929

Lynx 2.8.5, and other versions before 2.8.6dev.15, allows remote attackers to execute arbitrary commands via (1) lynxcgi:, (2) lynxexec, and (3) lynxprog links, which are not properly restricted in the default configuration in some environments.

Date published : 2005-11-18

http://www.securityfocus.com/bid/15395

http://support.avaya.com/elmodocs2/security/ASA-2006-035.htm