Lynx Long URL Buffer Overflow Vulnerabilities

Bugtraq ID:	1012
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 27 2000 12:00AM
Updated:	Feb 27 2000 12:00AM
Credit:	This vulnerability was posted to the Bugtraq mailing list by Michal Zalewski <[email protected]> on February 27, 2000.
Vulnerable:	University of Kansas Lynx 2.8.3 dev2x University of Kansas Lynx 2.8 University of Kansas Lynx 2.7
Not Vulnerable:	University of Kansas Lynx 2.8.3 pre.5 University of Kansas Lynx 2.8.3 dev.22

Lynx Long URL Buffer Overflow Vulnerabilities

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Lynx Long URL Buffer Overflow Vulnerabilities

Solution:
This vulnerability was remedied in Lynx release 2.8.3dev.22.
Versions 2.8.3pre.5 is the first mainstream release which fixes known buffer overrun problems.

FreeBSD has released upgraded versions of Lynx in their ports collection.


University of Kansas Lynx 2.7

• Lynx lynx 2.8.3dev.22
  http://lynx.isc.org/current/index.html

University of Kansas Lynx 2.8

• Lynx lynx 2.8.3dev.22
  http://lynx.isc.org/current/index.html

University of Kansas Lynx 2.8.3 dev2x

• Lynx lynx 2.8.3dev.22
  http://lynx.isc.org/current/index.html

Lynx Long URL Buffer Overflow Vulnerabilities

References: