RubyGems lynx CVE-2014-5002 Information Disclosure Vulnerability

Bugtraq ID:	68738
Class:	Design Error
CVE:	CVE-2014-5002
Remote:	Yes
Local:	No
Published:	Jul 07 2014 12:00AM
Updated:	Jul 07 2014 12:00AM
Credit:	Larry W. Cashdollar
Vulnerable:	Pan Thomakos lynx 0.2
Not Vulnerable:

RubyGems lynx CVE-2014-5002 Information Disclosure Vulnerability

lynx is prone to an information-disclosure vulnerability.

Remote attackers may exploit this issue to obtain sensitive information, such as password, that may aid in further attacks.

lynx 0.2.0 is vulnerable; other versions may also be affected.

RubyGems lynx CVE-2014-5002 Information Disclosure Vulnerability

Attackers can use standard, readily available tools to exploit this issue.

RubyGems lynx CVE-2014-5002 Information Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

RubyGems lynx CVE-2014-5002 Information Disclosure Vulnerability

References:

• RubyGems Lynx - Product Page (Pan Thomakos)
  
• Vulnerability Report for Ruby Gem lynx-0.2.0 (Larry W. Cashdollar)