CVE-2005-2929: university_of_kansas lynx
- 2 references with an unsupported link type were hidden.
Vulnerability summary
CVE-2005-2929 is a high (CVSS 7.5) vulnerability in university_of_kansas lynx. EPSS estimates a 4.92% chance of exploitation in the next 30 days, higher than 92.1% of scored vulnerabilities.
Not severe (CVSS 7.5, network access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Timeline
- 18-11-2005PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Lynx 2.8.5, and other versions before 2.8.6dev.15, allows remote attackers to execute arbitrary commands via (1) lynxcgi:, (2) lynxexec, and (3) lynxprog links, which are not properly restricted in the default configuration in some environments.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
4.92%
Chance of exploitation in the next 30 days
Percentile
92%
Versus all other CVEs
30-day change
No change 0.00 pp
From 4.92% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.
Redhat2 products
- lynx< 0:2.8.5-11.2 | < 0:2.8.5-18.2
- lynx-debuginfo< 0:2.8.5-11.2 | < 0:2.8.5-18.2
University_of_kansas1 product
- lynx2.8.5 | 2.8.6 | 2.8.6_dev13
2 vendors · 3 products
References
30 links- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9712VDB EntrySignatureX Refsource OVAL
Show all 30 references
- www.idefense.com/application/poi/display?id=338&type=vulnerabilitiesThird Party AdvisoryX Refsource IDEFENSEPatchVendor Advisory
- support.avaya.com/elmodocs2/security/ASA-2006-035.htmX Refsource CONFIRM
