Medium: wget

🗓️ 05 Nov 2014 00:00:00Reported by AmazonType

Absolute path traversal vulnerability in GNU Wget before 1.16 allows remote FTP servers to write to arbitrary files and execute arbitrary code via a LIST response

Reporter	Title	Published	Views	Family All 97
0day.today	GNU Wget FTP Symlink Arbitrary Filesystem Access Exploit	1 Nov 201400:00	–	zdt
IBM Security Bulletins	IBM Security Network Protection / IBM QRadar Network Security / XGS Technote Index	31 Jan 202100:10	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Security Network Protection (CVE-2014-3567, CVE-2014-4877, CVE-2014-3513, CVE-2014-3566, CVE-2014-3567, CVE-2014-3568)	16 Jun 201821:22	–	ibm
Tenable Nessus	Amazon Linux AMI : wget (ALAS-2014-442)	6 Nov 201400:00	–	nessus
Tenable Nessus	CentOS 6 / 7 : wget (CESA-2014:1764)	31 Oct 201400:00	–	nessus
Tenable Nessus	Debian DLA-82-1 : wget security update	26 Mar 201500:00	–	nessus
Tenable Nessus	Debian DSA-3062-1 : wget - security update	4 Nov 201400:00	–	nessus
Tenable Nessus	EulerOS Virtualization 3.0.1.0 : wget (EulerOS-SA-2019-1417)	14 May 201900:00	–	nessus
Tenable Nessus	Fedora 21 : wget-1.16-3.fc21 (2014-15347)	7 Dec 201400:00	–	nessus
Tenable Nessus	Fedora 20 : wget-1.16-3.fc20 (2014-15385)	24 Nov 201400:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Amazon Linux	1	i686	wget	1.16-1.13.amzn1	wget-1.16-1.13.amzn1.i686.rpm
Amazon Linux	1	x86_64	wget	1.16-1.13.amzn1	wget-1.16-1.13.amzn1.x86_64.rpm
Amazon Linux	1	i686	wget-debuginfo	1.16-1.13.amzn1	wget-debuginfo-1.16-1.13.amzn1.i686.rpm
Amazon Linux	1	x86_64	wget-debuginfo	1.16-1.13.amzn1	wget-debuginfo-1.16-1.13.amzn1.x86_64.rpm

05 Nov 2014 00:00Current

7.9High risk

Vulners AI Score7.9

CVSS 29.3

EPSS0.74311