CVE-2005-3120

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Lynx 2.8.6dev.13 - Remote Buffer Overflow (PoC)2005-10-17 · dos · multiple · Verified

Impact

Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape (ESC) characters.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://lists.grok.org.uk/pipermail/full-disclosure/2005-October/038019.html
• http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html
• http://secunia.com/advisories/17150
• http://secunia.com/advisories/17216
• http://secunia.com/advisories/17230
• http://secunia.com/advisories/17231
• http://secunia.com/advisories/17238
• http://secunia.com/advisories/17248
• http://secunia.com/advisories/17340
• http://secunia.com/advisories/17360
• http://secunia.com/advisories/17444
• http://secunia.com/advisories/17445
• http://secunia.com/advisories/17480
• http://secunia.com/advisories/18376
• http://secunia.com/advisories/18584
• http://secunia.com/advisories/20383
• http://securitytracker.com/id?1015065
• http://slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.423056
• http://support.avaya.com/elmodocs2/security/ASA-2006-010.htm
• http://www.debian.org/security/2005/dsa-874
• http://www.debian.org/security/2005/dsa-876
• http://www.debian.org/security/2006/dsa-1085
• http://www.gentoo.org/security/en/glsa/glsa-200510-15.xml
• http://www.mandriva.com/security/advisories?name=MDKSA-2005:186
• http://www.novell.com/linux/security/advisories/2005_25_sr.html