vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2008-4690

N/A
Published: October 22, 2008 at 05:00 PM UTC
Updated: June 16, 2026 at 10:58 PM UTC
1 product affected across 1 vendorLynx

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 5%

Description

lynx 2.8.6dev.15 and earlier, when advanced mode is enabled and lynx is configured as a URL handler, allows remote attackers to execute arbitrary commands via a crafted lynxcgi: URL, a related issue to CVE-2005-2929. NOTE: this might only be a vulnerability in limited deployments that have defined a lynxcgi: handler.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Lynx· Lynx
95%
v ≤ 2.8.62.8.1 dev.12.8.1 dev.102.8.1 dev.112.8.1 dev.122.8.1 dev.132.8.1 dev.142.8.1 dev.152.8.1 dev.162.8.1 dev.172.8.1 dev.182.8.1 dev.192.8.1 dev.22.8.1 dev.202.8.1 dev.212.8.1 dev.222.8.1 dev.232.8.1 dev.242.8.1 dev.262.8.1 dev.272.8.1 dev.282.8.1 dev.292.8.1 dev.32.8.1 dev.42.8.1 dev.52.8.1 dev.62.8.1 dev.72.8.1 dev.82.8.1 dev.92.8.1 pre.12.8.1 pre.102.8.1 pre.112.8.1 pre.22.8.1 pre.32.8.1 pre.42.8.1 pre.52.8.1 pre.62.8.1 pre.72.8.1 pre.82.8.1 pre.92.8.1 rel.12.8.1 rel.22.8.2 dev.12.8.2 dev.102.8.2 dev.112.8.2 dev.122.8.2 dev.132.8.2 dev.142.8.2 dev.152.8.2 dev.162.8.2 dev.172.8.2 dev.182.8.2 dev.192.8.2 dev.22.8.2 dev.202.8.2 dev.212.8.2 dev.222.8.2 dev.232.8.2 dev.242.8.2 dev.252.8.2 dev.262.8.2 dev.32.8.2 dev.42.8.2 dev.52.8.2 dev.62.8.2 dev.72.8.2 dev.82.8.2 dev.92.8.2 pre.12.8.2 pre.102.8.2 pre.112.8.2 pre.22.8.2 pre.32.8.2 pre.42.8.2 pre.52.8.2 pre.62.8.2 pre.72.8.2 pre.82.8.2 pre.92.8.2 rel.12.8.3 dev.12.8.3 dev.102.8.3 dev.112.8.3 dev.122.8.3 dev.132.8.3 dev.142.8.3 dev.152.8.3 dev.162.8.3 dev.172.8.3 dev.182.8.3 dev.192.8.3 dev.22.8.3 dev.202.8.3 dev.212.8.3 dev.222.8.3 dev.232.8.3 dev.32.8.3 dev.42.8.3 dev.52.8.3 dev.62.8.3 dev.72.8.3 dev.82.8.3 dev.92.8.3 pre12.8.3 pre22.8.3 pre32.8.3 pre42.8.3 pre52.8.3 pre62.8.3 pre72.8.3 pre82.8.3 rel12.8.4 dev12.8.4 dev102.8.4 dev112.8.4 dev122.8.4 dev132.8.4 dev142.8.4 dev152.8.4 dev162.8.4 dev172.8.4 dev182.8.4 dev192.8.4 dev22.8.4 dev202.8.4 dev212.8.4 dev32.8.4 dev42.8.4 dev52.8.4 dev62.8.4 dev72.8.4 dev82.8.4 dev92.8.4 pre.12.8.4 pre.22.8.4 pre.32.8.4 pre.42.8.4 pre.52.8.4 rel.12.8.5 dev.12.8.5 dev.102.8.5 dev.112.8.5 dev.122.8.5 dev.132.8.5 dev.142.8.5 dev.152.8.5 dev.162.8.5 dev.172.8.5 dev.22.8.5 dev.32.8.5 dev.42.8.5 dev.52.8.5 dev.62.8.5 dev.72.8.5 dev.82.8.5 dev.92.8.5 pre.12.8.5 pre.22.8.5 pre.32.8.5 pre.42.8.5 pre.52.8.5 rel.12.8.6 dev12.8.6 dev102.8.6 dev112.8.6 dev122.8.6 dev132.8.6 dev142.8.6 dev22.8.6 dev32.8.6 dev42.8.6 dev52.8.6 dev62.8.6 dev72.8.6 dev82.8.6 dev9dev15

References (13)

Vendor Advisoryx_refsource_SUSE
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html
Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/32416
Third Party Advisoryx_refsource_SECUNIA
Source: [email protected]
http://secunia.com/advisories/32967
Third Party Advisoryx_refsource_SECUNIA
Source: [email protected]
http://secunia.com/advisories/33568
Vendor Advisoryx_refsource_MANDRIVA
Source: [email protected]
http://www.mandriva.com/security/advisories?name=MDVSA-2008:217
Vendor Advisoryx_refsource_MANDRIVA
Source: [email protected]
http://www.mandriva.com/security/advisories?name=MDVSA-2008:218
Mailing Listx_refsource_MLIST
Source: [email protected]
http://www.openwall.com/lists/oss-security/2008/10/09/2
Vendor Advisoryx_refsource_REDHAT
Source: [email protected]
http://www.redhat.com/support/errata/RHSA-2008-0965.html

CVSS

10HIGH[email protected]
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card