CVE-2005-3120

Published: Oct 17, 2005Modified: Apr 16, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape (ESC) characters.

Affected (3)

Products: Invisible Island: Lynx · Debian: Debian Linux

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Invisible Island Lynx	Up to 2.8.6

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 3.0
Debian Debian Linux	Version 3.1

Related CWEs

CWE-131

Incorrect Calculation of Buffer Size

The product does not correctly calculate the size to be used when allocating a buffer, which could lead to a buffer overflow.

References (70)

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.7/SCOSA-2006.7.txt (unsafe URL)

Source: security@debian.org

Broken Link

ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.47/SCOSA-2005.47.txt (unsafe URL)

Source: security@debian.org

Broken Link

http://lists.grok.org.uk/pipermail/full-disclosure/2005-October/038019.html

Source: security@debian.org

Broken LinkPatchVendor Advisory

http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html

Source: security@debian.org

Broken Link

http://secunia.com/advisories/17150

Source: security@debian.org

Broken Link

http://secunia.com/advisories/17216

Source: security@debian.org

Broken Link

http://secunia.com/advisories/17230

Source: security@debian.org

Broken Link

http://secunia.com/advisories/17231

Source: security@debian.org

Broken Link

http://secunia.com/advisories/17238

Source: security@debian.org

Broken Link

http://secunia.com/advisories/17248

Source: security@debian.org

Broken Link

http://secunia.com/advisories/17340

Source: security@debian.org

Broken Link

http://secunia.com/advisories/17360

Source: security@debian.org

Broken Link

http://secunia.com/advisories/17444

Source: security@debian.org

Broken Link

http://secunia.com/advisories/17445

Source: security@debian.org

Broken Link

http://secunia.com/advisories/17480

Source: security@debian.org

Broken Link

http://secunia.com/advisories/18376

Source: security@debian.org

Broken Link

http://secunia.com/advisories/18584

Source: security@debian.org

Broken Link

http://secunia.com/advisories/20383

Source: security@debian.org

Broken Link

http://securitytracker.com/id?1015065

Source: security@debian.org

Broken LinkThird Party AdvisoryVDB Entry

http://slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.423056

Source: security@debian.org

Broken Link

http://support.avaya.com/elmodocs2/security/ASA-2006-010.htm

Source: security@debian.org

Third Party Advisory

http://www.debian.org/security/2005/dsa-874

Source: security@debian.org

Mailing ListThird Party Advisory

http://www.debian.org/security/2005/dsa-876

Source: security@debian.org

Mailing ListThird Party Advisory

http://www.debian.org/security/2006/dsa-1085

Source: security@debian.org

Mailing ListThird Party Advisory

http://www.gentoo.org/security/en/glsa/glsa-200510-15.xml

Source: security@debian.org

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2005:186

Source: security@debian.org

Third Party Advisory

http://www.novell.com/linux/security/advisories/2005_25_sr.html

Source: security@debian.org

Broken Link

http://www.openpkg.org/security/OpenPKG-SA-2005.026-lynx.html

Source: security@debian.org

Broken Link

http://www.redhat.com/support/errata/RHSA-2005-803.html

Source: security@debian.org

Broken LinkVendor Advisory

http://www.securityfocus.com/archive/1/419763/100/0/threaded

Source: security@debian.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/435689/30/4740/threaded

Source: security@debian.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/15117

Source: security@debian.org

Broken LinkThird Party AdvisoryVDB Entry

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=170253

Source: security@debian.org

Issue Tracking

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9257

Source: security@debian.org

Broken Link

https://usn.ubuntu.com/206-1/

Source: security@debian.org

Broken Link

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.7/SCOSA-2006.7.txt (unsafe URL)