Vulnerability Report

CVE-2005-3120

Title: Stack-based buffer overflow in Lynx HTrjis allows remote code execution via crafted NNTP article headers

Memory Corruption

Proof Of Concept

PoC Available for CVE-2005-3120

CWE Category CWE-131

Published Date Oct 17, 2005

Modified Date Jun 16, 2026

Exploit Status Available

Score 9.8 CVSS v3.1

Exploit Probability (EPSS)

23.26%

Vulnerability Summary

CVE-2005-3120: Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape (ESC) characters.

Impacted Vendors

university_of_kansas 1

lynx_project 1

invisible-island 1

Reference Links

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.7/SCOSA-2006.7.txt ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.47/SCOSA-2005.47.txt http://lists.grok.org.uk/pipermail/full-disclosure/2005-October/038019.html http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html http://secunia.com/advisories/17150 http://secunia.com/advisories/17216 http://secunia.com/advisories/17230 http://secunia.com/advisories/17231 http://secunia.com/advisories/17238 http://secunia.com/advisories/17248 http://secunia.com/advisories/17340 http://secunia.com/advisories/17360 http://secunia.com/advisories/17444 http://secunia.com/advisories/17445 http://secunia.com/advisories/17480 http://secunia.com/advisories/18376 http://secunia.com/advisories/18584 http://secunia.com/advisories/20383 http://securitytracker.com/id?1015065 http://slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.423056 http://support.avaya.com/elmodocs2/security/ASA-2006-010.htm http://www.debian.org/security/2005/dsa-874 http://www.debian.org/security/2005/dsa-876 http://www.debian.org/security/2006/dsa-1085 http://www.gentoo.org/security/en/glsa/glsa-200510-15.xml http://www.mandriva.com/security/advisories?name=MDKSA-2005:186 http://www.novell.com/linux/security/advisories/2005_25_sr.html http://www.openpkg.org/security/OpenPKG-SA-2005.026-lynx.html http://www.redhat.com/support/errata/RHSA-2005-803.html http://www.securityfocus.com/archive/1/419763/100/0/threaded http://www.securityfocus.com/archive/1/435689/30/4740/threaded http://www.securityfocus.com/bid/15117 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=170253 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9257 https://usn.ubuntu.com/206-1/ ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.7/SCOSA-2006.7.txt ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.47/SCOSA-2005.47.txt http://lists.grok.org.uk/pipermail/full-disclosure/2005-October/038019.html http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html http://secunia.com/advisories/17150 http://secunia.com/advisories/17216 http://secunia.com/advisories/17230 http://secunia.com/advisories/17231 http://secunia.com/advisories/17238 http://secunia.com/advisories/17248 http://secunia.com/advisories/17340 http://secunia.com/advisories/17360 http://secunia.com/advisories/17444 http://secunia.com/advisories/17445 http://secunia.com/advisories/17480 http://secunia.com/advisories/18376 http://secunia.com/advisories/18584 http://secunia.com/advisories/20383 http://securitytracker.com/id?1015065 http://slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.423056 http://support.avaya.com/elmodocs2/security/ASA-2006-010.htm http://www.debian.org/security/2005/dsa-874 http://www.debian.org/security/2005/dsa-876 http://www.debian.org/security/2006/dsa-1085 http://www.gentoo.org/security/en/glsa/glsa-200510-15.xml http://www.mandriva.com/security/advisories?name=MDKSA-2005:186 http://www.novell.com/linux/security/advisories/2005_25_sr.html http://www.openpkg.org/security/OpenPKG-SA-2005.026-lynx.html http://www.redhat.com/support/errata/RHSA-2005-803.html http://www.securityfocus.com/archive/1/419763/100/0/threaded http://www.securityfocus.com/archive/1/435689/30/4740/threaded http://www.securityfocus.com/bid/15117 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=170253 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9257 https://usn.ubuntu.com/206-1/

CVSS v3.1

Source Entity [email protected]

Severity CRITICAL

9.8

Attack Vector

NETWORK

Complexity

LOW

Privileges

N/A

Interaction

NONE

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

UNCHANGED

RAW VECTOR CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

Source Entity [email protected]

Severity HIGH

7.5

Access Vector

N/A

Authentication

N/A

RAW VECTOR AV:N/AC:L/Au:N/C:P/I:P/A:P

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2005-3120 Exploits & PoCs (Proof Of Concept)

Exploit-DB https://www.exploit-db.com/exploits/1256

View Code

June 16, 2026 MODIFIED

Vulnerability data updated via NVD.

April 03, 2025 MODIFIED

Vulnerability data or affected products updated.

October 17, 2005 PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector NETWORK

Complexity LOW

Privileges N/A

Interaction NONE

CVSS Vector String


                                    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Stack

No specific products linked.