A malicious user with access to the same machine as other Lynx users may be able to cause another user's Lynx process to overwrite another file. It may also be possible to replace the contents of a downloaded file with a file other than the one the user downloaded, or to cause the user to print a file other than the one selected for printing. Solutions There are several ways to solve this problem. As an aid to allowing Lynx to find user-specific temp. The next release of Lynx will eliminate this vulnerability.
More help is available in the source distribution.
To aid in the wide distribution of essential security information, the CERT Coordination Center is forwarding the following information from Jim Spath, who coordinated this bulletin with several members of the lynx-dev mailing list. They urge you to act on this information as soon as possible. Installed versions of Lynx up to and including version 2.7.1 on Unix or Unix-like operating systems are vulnerable. This includes public Lynxes as well as any setup where the user is restricted as to which programs can be run. Patches you may find from before that date may not entirely eliminate the vulnerability.