Oval Definition:oval:com.redhat.rhsa:def:20050803
Revision Date:2007-01-26Version:502
Title:RHSA-2005:803: lynx security update (Critical)
Description:Lynx is a text-based Web browser.

Ulf Härnhammar discovered a stack overflow bug in Lynx when handling connections to NNTP (news) servers. An attacker could create a web page redirecting to a malicious news server which could execute arbitrary code as the user running lynx. The Common Vulnerabilities and Exposures project assigned the name CAN-2005-3120 to this issue.

Users should update to this erratum package, which contains a backported patch to correct this issue.
Family:unixClass:patch
Status:Reference(s):CVE-2005-3120
RHSA-2005:803-01
Platform(s):Red Hat Enterprise Linux 3
Red Hat Enterprise Linux 4
Product(s):
Definition Synopsis
  • Release Information
  • Red Hat Enterprise Linux 3 is installed
  • AND lynx is earlier than 0:2.8.5-11.1
  • AND lynx is signed with Red Hat master key
  • OR Package Information
  • Red Hat Enterprise Linux 4 is installed
  • AND lynx is earlier than 0:2.8.5-18.1
  • AND lynx is signed with Red Hat master key
    • BACK