ELinks CVE-2012-4545 Security Bypass Vulnerability

Bugtraq ID:	57065
Class:	Design Error
CVE:	CVE-2012-4545
Remote:	Yes
Local:	No
Published:	Dec 28 2012 12:00AM
Updated:	May 07 2015 05:17PM
Credit:	Marko Myllynen
Vulnerable:	Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux HPC Node 6 Redhat Enterprise Linux Desktop 6 Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux 5 Server Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Mandriva Business Server 1 X86 64 Mandriva Business Server 1 ELinks ELinks 0.12pre5 ELinks ELinks 0.12pre1 CentOS CentOS 5
Not Vulnerable:	ELinks ELinks 0.12pre6

ELinks CVE-2012-4545 Security Bypass Vulnerability

ELinks is prone to a security-bypass vulnerability that may allow attackers to perform actions without proper authorization.

Attackers can exploit this issue to bypass security restrictions to obtain sensitive information or perform unauthorized actions; this may aid in launching further attacks.

ELinks CVE-2012-4545 Security Bypass Vulnerability

Attackers can exploit this issue through a browser.

ELinks CVE-2012-4545 Security Bypass Vulnerability

Solution:
Updates are available. Please see the references for more details.


Mandriva Business Server 1 X86 64

• Mandriva elinks-0.12-2.1.mbs1.x86_64.rpm
  http://www.mandriva.com/en/downloads/

ELinks CVE-2012-4545 Security Bypass Vulnerability

References:

• Elinks Home Page (Elinks)