← back
CVE-2006-5925

CVE-2006-5925

EPSS 8.1%
Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code via shell metacharacters in an smb:// URI, as demonstrated by using PUT and GET statements.
Affected products
n/a · n/a
public PoCs found — 2
exploitdbwww.exploit-db.com/exploits/29033unverifiedexploitdbwww.exploit-db.com/exploits/2784unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://bugzilla.elinks.cz/show_bug.cgi?id=841http://marc.info/?l=full-disclosure&m=116355556512780&w=2http://secunia.com/advisories/22905http://secunia.com/advisories/22920http://secunia.com/advisories/22923http://secunia.com/advisories/23022http://secunia.com/advisories/23132http://secunia.com/advisories/23188http://secunia.com/advisories/23234http://secunia.com/advisories/23389http://secunia.com/advisories/23467http://secunia.com/advisories/24005