High severity7.8NVD Advisory· Published Nov 16, 1999· Updated Apr 16, 2026
CVE-1999-1549
CVE-1999-1549
Description
Lynx 2.x does not properly distinguish between internal and external HTML, which may allow a local attacker to read a "secure" hidden form value from a temporary file and craft a LYNXOPTIONS: URL that causes Lynx to modify the user's configuration file and execute commands.
Affected products
2cpe:2.3:a:lynx_project:lynx:2.7:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:lynx_project:lynx:2.7:*:*:*:*:*:*:*
- cpe:2.3:a:lynx_project:lynx:2.8:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- marc.infonvdExploitMailing List
- www.securityfocus.com/bid/804nvdBroken LinkExploitThird Party AdvisoryVDB EntryVendor Advisory
News mentions
0No linked articles in our index yet.