AnNyung Official Homepage Home > Update [ 1.3 ]  

HOME
What is AnNyung
Documents
Packages System
White Paper
Download
Update
  . 3.x [RSS]
  . 2.x [RSS]
  . 1.3 [RSS]
  . 1.2 [RSS]
  . 1.1 [RSS]
  . 1.0 [RSS]
FAQ
Hardware
RoadMap
Gallery

  Go oops.org
  AnNyung banner 88x31

  AnNyung 1 banner 80x15
  AnNyung 2 banner 80x15
  AnNyung 3 banner 80x15
  AnNyung banner 80x15
  AnNyung banner 80x15



lynx 보안 업데이트
Web Browser 로는 FTP 접속이 불가능 합니다.

문서번호 : 1227005263
업데이트 : 2008.11.18


상세내용

* 보안 버그 수정

. CVE-2006-7234 :
A flaw was found in a way Lynx handled ".mailcap" and ".mime.types"
configuration files. Files in the browser's current working directory were
opened before those in the user's home directory. A local attacker, able to
convince a user to run Lynx in a directory under their control, could
possibly execute arbitrary commands as the user running Lynx.

. CVE-2008-4690 :
An arbitrary command execution flaw was found in the Lynx "lynxcgi:" URI
handler. An attacker could create a web page redirecting to a malicious URL
that could execute arbitrary code as the user running Lynx in the
non-default "Advanced" user mode.


Autoupdates 지원 : 지원
  pkgsysupdate


update 패키지

  RPMS :

    . lynx-2.8.5-28.1.1.i686.rpm

  SRPMS :

    . lynx-2.8.5-28.1.1.src.rpm


참고 :
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-7234
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4690



    



 Home > Update [ 1.3 ]

Copyright 2018 OOPS Development Organization 
LAST MODIFIED: 2016/04/24