CVE-2006-5925

Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code via shell metacharacters in an smb:// URI, as demonstrated by using PUT and GET statements.

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

8.76% chance of exploitation in the next 30 days, 95th percentile

Published

2006-11-15

Updated

2024-08-07

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/29033
• https://www.exploit-db.com/exploits/2784

Security advisories

• http://secunia.com/advisories/22905
• http://secunia.com/advisories/22920
• http://secunia.com/advisories/22923
• http://secunia.com/advisories/23022
• http://secunia.com/advisories/23132
• http://secunia.com/advisories/23188
• http://secunia.com/advisories/23234
• http://secunia.com/advisories/23389
• http://secunia.com/advisories/23467
• http://secunia.com/advisories/24005
• http://secunia.com/advisories/24054
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:216
• http://www.redhat.com/support/errata/RHSA-2006-0742.html
• http://www.securityfocus.com/bid/21082

References

• CVE Record
• NVD entry