Red Hat Customer Portal

Skip to main content


Public Date:
172972: CVE-2005-2929 lynx arbitrary command execution

The MITRE CVE dictionary describes this issue as:

Lynx 2.8.5, and other versions before 2.8.6dev.15, allows remote attackers to execute arbitrary commands via (1) lynxcgi:, (2) lynxexec, and (3) lynxprog links, which are not properly restricted in the default configuration in some environments.

Find out more about CVE-2005-2929 from the MITRE CVE dictionary dictionary and NIST NVD.


Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.

Red Hat Security Errata

Platform Errata Release Date
Red Hat Enterprise Linux 3 (lynx) RHSA-2005:839 2005-11-12
Red Hat Enterprise Linux 4 (lynx) RHSA-2005:839 2005-11-12
Red Hat Enterprise Linux 2.1 (lynx) RHSA-2005:839 2005-11-12

Last Modified