CVE-1999-1549: Lynx 2.x does not properly distinguish between internal and external HTML, which may allow a local attacker to read a "s

Published n/a Updated 2026-08-21T04:30:50.721Z

Summary

Lynx 2.x does not properly distinguish between internal and external HTML, which may allow a local attacker to read a "secure" hidden form value from a temporary file and craft a LYNXOPTIONS: URL that causes Lynx to modify the user's configuration file and execute commands.

Severity

UNKNOWN

Source Attribution

Source: NVD · Updated: 2026-08-21T04:30:50.721Z · Confidence: high

Impact

Based on CVSS vector: n/a — assess confidentiality, integrity, and availability impact via the official vector documentation.

Affected Software

Fix

Upgrade affected software to the fixed version identified above. Apply vendor patches and monitor advisories before exposed systems go unpatched.

References