Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2005-2929

Quick assessment

Affected

n/a n/a

Exploitation

High exploitation probability; assess promptly

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Lynx是一个基于文本的WWW浏览器。它不能够显示图像或Java句柄，所以执行速度非常快。很多厂商的Lynx实现中存在远程命令注入漏洞，恶意站点可能利用此漏洞在客户机上执行任意命令。Lynx允许通过"lynxcgi:" URI处理器执行本地cgi-bin程序。通常该处理器应仅限于特定的目录或程序。但是，由于多个平台的配置错误，默认设置允许任意站点指定将要运行的命令，这样就允许远程攻击者以运行Lynx用户的权限执行任意命令。

AI Predicted 7.5 Difficulty: Easy EPSS 4.92% · P92 Updated Feb 27, 2026

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2005-2929

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

Lynx 2.8.5, and other versions before 2.8.6dev.15, allows remote attackers to execute arbitrary commands via (1) lynxcgi:, (2) lynxexec, and (3) lynxprog links, which are not properly restricted in the default configuration in some environments.

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Vulnerability Title

Lynx URI处理器任意命令执行漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2005-2929

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2005-2929

请登录查看更多情报信息。

Vendor Advisories for CVE-2005-2929 (17)

http://secunia.com/advisories/18051 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/17556 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/18659 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/17757 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/17372 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/17576 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/18376 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/17546 third-party-advisory x_refsource_SECUNIA
http://www.securityfocus.com/bid/15395 vdb-entry x_refsource_BID
http://secunia.com/advisories/17512 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/17666 third-party-advisory x_refsource_SECUNIA
http://securitytracker.com/id?1015195 vdb-entry x_refsource_SECTRACK
http://www.securityfocus.com/archive/1/419763/100/0/threaded vendor-advisory x_refsource_FEDORA
http://www.vupen.com/english/advisories/2005/2394 vdb-entry x_refsource_VUPEN
http://www.mandriva.com/security/advisories?name=MDKSA-2005:211 vendor-advisory x_refsource_MANDRIVA
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9712 vdb-entry signature x_refsource_OVAL
https://exchange.xforce.ibmcloud.com/vulnerabilities/23119 vdb-entry x_refsource_XF

Other References for CVE-2005-2929 (8)

http://support.avaya.com/elmodocs2/security/ASA-2006-035.htm x_refsource_CONFIRM
http://securityreason.com/securityalert/173 third-party-advisory x_refsource_SREASON
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.7/SCOSA-2006.7.txt vendor-advisory x_refsource_SCO
ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.55/SCOSA-2005.55.txt vendor-advisory x_refsource_SCO
http://www.redhat.com/support/errata/RHSA-2005-839.html vendor-advisory x_refsource_REDHAT
http://www.gentoo.org/security/en/glsa/glsa-200511-09.xml vendor-advisory x_refsource_GENTOO
http://www.openpkg.org/security/OpenPKG-SA-2005.026-lynx.html vendor-advisory x_refsource_OPENPKG
http://www.idefense.com/application/poi/display?id=338&type=vulnerabilities third-party-advisory x_refsource_IDEFENSE

https://www.cve.org/CVERecord?id=CVE-2005-2929

Same Patch Batch · n/a · 2005-11-18 · 39 CVEs total

CVE-2005-2976		GTK+ gdk-pixbuf XPM图形渲染库io-xpm整数溢出漏洞
CVE-2005-3672		Stonesoft StoneGate Firewall IKE 拒绝服务漏洞
CVE-2005-3673		Check Point 产品IKE未明的拒绝服务漏洞
CVE-2005-3674		Sun Solaris LibIKE库 IKE 拒绝服务漏洞
CVE-2005-1925		TikiWiki 多个目录遍历漏洞
CVE-2005-2936		RealNetworks RealPlayer Windows搜索路径漏洞
CVE-2005-2938		APPLE iTunes非上市Windows搜索路径漏洞
CVE-2005-2939		VMWare VMWare Workstation WINDOWS搜索路径漏洞
CVE-2005-2940		Microsoft Antispyware非上市WINDOWS搜索路径漏洞
CVE-2005-2975		GTK+ gdk-pixbuf XPM图形渲染库io-xpm拒绝服务漏洞
CVE-2005-3671		Openswan-2 IKE拒绝服务漏洞
CVE-2005-3116		Veritas NetBackup卷管理器守护程序溢出漏洞
CVE-2005-3186		GTK+ gdk-pixbuf XPM图形渲染库整数溢出漏洞
CVE-2005-3663		Kaspersky Anti-Virus 未引用的Windows搜索路径漏洞
CVE-2005-3664		Kaspersky杀毒引擎CHM文件解析器远程溢出漏洞
CVE-2005-3189		Qualcomm Worldmail服务器目录遍历漏洞
CVE-2005-3347		phpSysInfo index.php多个目录遍历漏洞
CVE-2005-3348		PHPsysInfo index.php响应分割漏洞
CVE-2005-3662		PNMToPNG Alphas_Of_Color缓冲区溢出漏洞
CVE-2005-3682		Wizz Forum多个SQL注入漏洞

Showing top 20 of 39 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a

V. Comments for CVE-2005-2929

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2005-2929

Quick assessment

Possible ATT&CK Techniques 1 AI

I. Basic Information for CVE-2005-2929

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2005-2929

III. Intelligence Information for CVE-2005-2929

Vendor Advisories for CVE-2005-2929 (17)

Other References for CVE-2005-2929 (8)

Same Patch Batch · n/a · 2005-11-18 · 39 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2005-2929

Leave a comment