Exploitation Summary
EIP tracks 2 public exploits for CVE-2006-5925. PoCs published by Teemu Salmela.
AI-analyzed exploit summary This exploit leverages a command injection vulnerability in Links and ELinks browsers by embedding malicious 'smb' commands in an HTML anchor tag. When clicked, it executes arbitrary commands via 'smbclient' if installed on the victim's system.
Description
Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code via shell metacharacters in an smb:// URI, as demonstrated by using PUT and GET statements.
Exploits (2)
This exploit leverages a command injection vulnerability in Links and ELinks browsers by embedding malicious 'smb' commands in an HTML anchor tag. When clicked, it executes arbitrary commands via 'smbclient' if installed on the victim's system.
This exploit leverages a command injection vulnerability in the Links web browser (version 1.00pre12) by crafting a malicious SMB URL. The flaw in smb.c allows arbitrary command execution via smbclient, enabling file exfiltration or upload.