CVE-2006-5925: elinks

EPSS trend

Probability

8.76%

Chance of exploitation in the next 30 days

Percentile

95%

Versus all other CVEs

30-day change

Increase +0.51 pp

From 8.26% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

2 found

exploit-databaseremotelinuxVerified
Links_ ELinks 'smbclient' - Remote Command Execution
Maturity: weaponized
exploit-databaseremotemultipleVerified
Links 1.00pre12 - 'smbclient' Remote Code Execution
Maturity: weaponized

References

39 links

securitytracker.com/id?1017233VDB EntryX Refsource SECTRACK
secunia.com/advisories/22920Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.redhat.com/support/errata/RHSA-2006-0742.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/22923Third Party AdvisoryX Refsource SECUNIAVendor Advisory
security.gentoo.org/glsa/glsa-200612-16.xmlVendor AdvisoryX Refsource GENTOO
secunia.com/advisories/22905Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.trustix.org/errata/2007/0005Vendor AdvisoryX Refsource TRUSTIX
www.securityfocus.com/archive/1/451870/100/200/threadedMailing ListX Refsource BUGTRAQ
secunia.com/advisories/23467Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/24005Third Party AdvisoryX Refsource SECUNIAVendor Advisory

Show all 39 references

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11213VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/23188Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.debian.org/security/2006/dsa-1240Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/23234Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.debian.org/security/2006/dsa-1228Vendor AdvisoryX Refsource DEBIAN
securitytracker.com/id?1017232VDB EntryX Refsource SECTRACK
www.novell.com/linux/security/advisories/2006_27_sr.htmlVendor AdvisoryX Refsource SUSE
exchange.xforce.ibmcloud.com/vulnerabilities/30299VDB EntryX Refsource XF
secunia.com/advisories/24054Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/23132Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/bid/21082VDB EntryX Refsource BID
marc.info?l=full-disclosure&m=116355556512780&w=2Mailing ListX Refsource FULLDISC
www.debian.org/security/2006/dsa-1226Vendor AdvisoryX Refsource DEBIAN
www.mandriva.com/security/advisories?name=MDKSA-2006:216Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/23389Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/23022Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.gentoo.org/security/en/glsa/glsa-200701-27.xmlVendor AdvisoryX Refsource GENTOO
bugzilla.elinks.cz/show_bug.cgi?id=841X Refsource CONFIRM
access.redhat.com/errata/RHSA-2006:0742Advisory
access.redhat.com/security/updates/classification/ARTICLE
marc.theaimsgroup.com?&m=116355556512780ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=215731REPORT
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0742.jsonAdvisory
access.redhat.com/security/cve/CVE-2006-5925REPORT
bugzilla.redhat.com/show_bug.cgi?id=1618231REPORT
www.cve.org/CVERecord?id=CVE-2006-5925Advisory
nvd.nist.gov/vuln/detail/CVE-2006-5925Advisory
security-tracker.debian.org/tracker/CVE-2006-5925Advisory
www.suse.com/security/cve/CVE-2006-5925WEB

Related vulnerabilities

RoutineCVE-2012-6709elinks +4 more8y agoelinks elinksELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation.CVSS5.9MediumEPSS0.66%RoutineCVE-2012-4545elinks +3 more13y agoelinks elinksThe http_negotiate_create_context function in protocol/http/http_negotiate.c in ELinks 0.12 before 0.12pre6, when using HTTP Negotiate or GSS-Negotiate authentication, delegates user credentials through GSSAPI, which allows remote servers to authenticate as the client via the delegated credentials.CVSS5.1MediumEPSS1.91%PrioritiseCVE-2008-7224elinks +1 more17y agoelinks elinksBuffer overflow in entity_cache in ELinks before 0.11.4rc0 allows remote attackers to cause a denial of service (crash) via a crafted link.CVSS7.8HighEPSS2.83%RoutineCVE-2007-5034elinks +3 more19y agoelinks elinksELinks before 0.11.3, when sending a POST request for an https URL, appends the body and content headers of the POST request to the CONNECT request in cleartext, which allows remote attackers to sniff sensitive data that would have been protected by TLS. NOTE: this issue only occurs when a proxy is defined for https.CVSS4.3MediumEPSS2.60%PrioritiseCVE-2007-2027elinks +1 more19y agoelinks elinksUntrusted search path vulnerability in the add_filename_to_string function in intl/gettext/loadmsgcat.c for Elinks 0.11.1 allows local users to cause Elinks to use an untrusted gettext message catalog (.po file) in a "../po" directory, which can be leveraged to conduct format string attacks.CVSS4.4MediumEPSS0.84%RoutineCVE-2004-1616links21y agolinks linksLinks allows remote attackers to cause a denial of service (memory consumption) via a web page or HTML email that contains a table with a td element and a large rowspan value,as demonstrated by mangleme.CVSS5.0MediumEPSS1.87%

All vulnerabilities inelinks links

CVE-2006-5925: elinks

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References