CVE-2006-5925

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 8.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-11-15 · updated 2026-06-16

Description

Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code via shell metacharacters in an smb:// URI, as demonstrated by using PUT and GET statements.

Affected products

Elinks: 0.9.2
Links: 1.00pre12

References

http://bugzilla.elinks.cz/show_bug.cgi?id=841
http://marc.info/?l=full-disclosure&m=116355556512780&w=2
http://secunia.com/advisories/22905
http://secunia.com/advisories/22920
http://secunia.com/advisories/22923
http://secunia.com/advisories/23022
http://secunia.com/advisories/23132
http://secunia.com/advisories/23188
http://secunia.com/advisories/23234
http://secunia.com/advisories/23389
http://secunia.com/advisories/23467
http://secunia.com/advisories/24005

Get alerted when CVE-2006-5925 or the next vulnerability affects your stack