lynx: It was found that Lynx doesn't parse the authority component of the URL correctly when the host name part ends with '?', and could instead be tricked into connecting to a different host.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/94215 | Third Party Advisory VDB Entry |
http://www.openwall.com/lists/oss-security/2016/11/04/1 | Mailing List Third Party Advisory |
Configurations
Information
Published : 2016-12-22 13:59
Updated : 2016-12-23 06:44
NVD link : CVE-2016-9179
Mitre link : CVE-2016-9179
JSON object : View
CWE
CWE-20
Improper Input Validation
Products Affected
lynx
- lynx