CVE-2016-9179

lynx: It was found that Lynx doesn't parse the authority component of the URL correctly when the host name part ends with '?', and could instead be tricked into connecting to a different host.
References
Link Resource
http://www.securityfocus.com/bid/94215 Third Party Advisory VDB Entry
http://www.openwall.com/lists/oss-security/2016/11/04/1 Mailing List Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:lynx:lynx:*:*:*:*:*:*:*:*

Information

Published : 2016-12-22 13:59

Updated : 2016-12-23 06:44


NVD link : CVE-2016-9179

Mitre link : CVE-2016-9179


JSON object : View

CWE
CWE-20

Improper Input Validation

Advertisement

dedicated server usa

Products Affected

lynx

  • lynx