Vulnerability Report

CVE-2006-5925

RCE

Title: Links RCE

RCE

Proof Of Concept

PoC Available for CVE-2006-5925

CWE Category NVD-CWE-noinfo

Published Date Nov 15, 2006

Modified Date Jun 16, 2026

Exploit Status Available

Score 7.5 CVSS v2.0

Exploit Probability (EPSS)

8.05%

Vulnerability Summary

CVE-2006-5925: Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code via shell metacharacters in an smb:// URI, as demonstrated by using PUT and GET statements.

Impacted Vendors

Reference Links

http://bugzilla.elinks.cz/show_bug.cgi?id=841 http://marc.info/?l=full-disclosure&m=116355556512780&w=2 http://secunia.com/advisories/22905 http://secunia.com/advisories/22920 http://secunia.com/advisories/22923 http://secunia.com/advisories/23022 http://secunia.com/advisories/23132 http://secunia.com/advisories/23188 http://secunia.com/advisories/23234 http://secunia.com/advisories/23389 http://secunia.com/advisories/23467 http://secunia.com/advisories/24005 http://secunia.com/advisories/24054 http://security.gentoo.org/glsa/glsa-200612-16.xml http://securitytracker.com/id?1017232 http://securitytracker.com/id?1017233 http://www.debian.org/security/2006/dsa-1228 http://www.debian.org/security/2006/dsa-1240 http://www.gentoo.org/security/en/glsa/glsa-200701-27.xml http://www.mandriva.com/security/advisories?name=MDKSA-2006:216 http://www.novell.com/linux/security/advisories/2006_27_sr.html http://www.redhat.com/support/errata/RHSA-2006-0742.html http://www.securityfocus.com/archive/1/451870/100/200/threaded http://www.securityfocus.com/bid/21082 http://www.trustix.org/errata/2007/0005 https://exchange.xforce.ibmcloud.com/vulnerabilities/30299 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11213 https://www.debian.org/security/2006/dsa-1226 http://bugzilla.elinks.cz/show_bug.cgi?id=841 http://marc.info/?l=full-disclosure&m=116355556512780&w=2 http://secunia.com/advisories/22905 http://secunia.com/advisories/22920 http://secunia.com/advisories/22923 http://secunia.com/advisories/23022 http://secunia.com/advisories/23132 http://secunia.com/advisories/23188 http://secunia.com/advisories/23234 http://secunia.com/advisories/23389 http://secunia.com/advisories/23467 http://secunia.com/advisories/24005 http://secunia.com/advisories/24054 http://security.gentoo.org/glsa/glsa-200612-16.xml http://securitytracker.com/id?1017232 http://securitytracker.com/id?1017233 http://www.debian.org/security/2006/dsa-1228 http://www.debian.org/security/2006/dsa-1240 http://www.gentoo.org/security/en/glsa/glsa-200701-27.xml http://www.mandriva.com/security/advisories?name=MDKSA-2006:216 http://www.novell.com/linux/security/advisories/2006_27_sr.html http://www.redhat.com/support/errata/RHSA-2006-0742.html http://www.securityfocus.com/archive/1/451870/100/200/threaded http://www.securityfocus.com/bid/21082 http://www.trustix.org/errata/2007/0005 https://exchange.xforce.ibmcloud.com/vulnerabilities/30299 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11213 https://www.debian.org/security/2006/dsa-1226

CVSS v2.0

Source Entity [email protected]

Severity HIGH

7.5

Access Vector

N/A

Authentication

N/A

RAW VECTOR AV:N/AC:L/Au:N/C:P/I:P/A:P

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2006-5925 Exploits & PoCs (Proof Of Concept)

Exploit-DB https://www.exploit-db.com/exploits/29033

View Code

Exploit-DB https://www.exploit-db.com/exploits/2784

View Code

June 16, 2026 MODIFIED

Vulnerability data updated via NVD.

April 23, 2026 MODIFIED

Vulnerability data updated via NVD.

April 09, 2025 MODIFIED

Vulnerability data or affected products updated.

November 15, 2006 PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A

Complexity N/A

Privileges N/A

Interaction NONE

CVSS Vector String


                                    AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected Stack

No specific products linked.