CVE-2005-2929

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-11-18 · updated 2026-06-16
Weakness: CWE-264

Description

Lynx 2.8.5, and other versions before 2.8.6dev.15, allows remote attackers to execute arbitrary commands via (1) lynxcgi:, (2) lynxexec, and (3) lynxprog links, which are not properly restricted in the default configuration in some environments.

Affected products

University Of Kansas Lynx: 2.8.5, 2.8.6, 2.8.6_dev13

References

http://secunia.com/advisories/17372
http://secunia.com/advisories/17512
http://secunia.com/advisories/17546
http://secunia.com/advisories/17556
http://secunia.com/advisories/17576
http://secunia.com/advisories/17666
http://secunia.com/advisories/17757
http://secunia.com/advisories/18051
http://secunia.com/advisories/18376
http://secunia.com/advisories/18659

Get alerted when CVE-2005-2929 or the next vulnerability affects your stack