Vulnerability Report

CVE-2005-2929

RCE

Title: Command execution via lynxcgi/lynxexec/lynxprog links

RCE

Proof Of Concept

No public PoC currently indexed for CVE-2005-2929.

CWE Category CWE-264

Published Date Nov 18, 2005

Modified Date Jun 16, 2026

Exploit Status Not Found

Score 7.5 CVSS v2.0

Exploit Probability (EPSS)

4.92%

Vulnerability Summary

CVE-2005-2929: Lynx 2.8.5, and other versions before 2.8.6dev.15, allows remote attackers to execute arbitrary commands via (1) lynxcgi:, (2) lynxexec, and (3) lynxprog links, which are not properly restricted in the default configuration in some environments.

Impacted Vendors

university_of_kansas 1

lynx_project 1

invisible-island 1

Reference Links

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.7/SCOSA-2006.7.txt ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.55/SCOSA-2005.55.txt http://secunia.com/advisories/17372 http://secunia.com/advisories/17512 http://secunia.com/advisories/17546 http://secunia.com/advisories/17556 http://secunia.com/advisories/17576 http://secunia.com/advisories/17666 http://secunia.com/advisories/17757 http://secunia.com/advisories/18051 http://secunia.com/advisories/18376 http://secunia.com/advisories/18659 http://securityreason.com/securityalert/173 http://securitytracker.com/id?1015195 http://support.avaya.com/elmodocs2/security/ASA-2006-035.htm http://www.gentoo.org/security/en/glsa/glsa-200511-09.xml http://www.idefense.com/application/poi/display?id=338&type=vulnerabilities http://www.mandriva.com/security/advisories?name=MDKSA-2005:211 http://www.openpkg.org/security/OpenPKG-SA-2005.026-lynx.html http://www.redhat.com/support/errata/RHSA-2005-839.html http://www.securityfocus.com/archive/1/419763/100/0/threaded http://www.securityfocus.com/bid/15395 http://www.vupen.com/english/advisories/2005/2394 https://exchange.xforce.ibmcloud.com/vulnerabilities/23119 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9712 ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.7/SCOSA-2006.7.txt ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.55/SCOSA-2005.55.txt http://secunia.com/advisories/17372 http://secunia.com/advisories/17512 http://secunia.com/advisories/17546 http://secunia.com/advisories/17556 http://secunia.com/advisories/17576 http://secunia.com/advisories/17666 http://secunia.com/advisories/17757 http://secunia.com/advisories/18051 http://secunia.com/advisories/18376 http://secunia.com/advisories/18659 http://securityreason.com/securityalert/173 http://securitytracker.com/id?1015195 http://support.avaya.com/elmodocs2/security/ASA-2006-035.htm http://www.gentoo.org/security/en/glsa/glsa-200511-09.xml http://www.idefense.com/application/poi/display?id=338&type=vulnerabilities http://www.mandriva.com/security/advisories?name=MDKSA-2005:211 http://www.openpkg.org/security/OpenPKG-SA-2005.026-lynx.html http://www.redhat.com/support/errata/RHSA-2005-839.html http://www.securityfocus.com/archive/1/419763/100/0/threaded http://www.securityfocus.com/bid/15395 http://www.vupen.com/english/advisories/2005/2394 https://exchange.xforce.ibmcloud.com/vulnerabilities/23119 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9712

CVSS v2.0

Source Entity [email protected]

Severity HIGH

7.5

Access Vector

N/A

Authentication

N/A

RAW VECTOR AV:N/AC:L/Au:N/C:P/I:P/A:P

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2005-2929 Exploits & PoCs (Proof Of Concept)

No public PoCs found in our database for this CVE.

June 16, 2026 MODIFIED

Vulnerability data updated via NVD.

April 03, 2025 MODIFIED

Vulnerability data or affected products updated.

November 18, 2005 PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A

Complexity N/A

Privileges N/A

Interaction NONE

CVSS Vector String


                                    AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected Stack

No specific products linked.