USN-3012-1 Wget vulnerability | Cloud Foundry

🗓️ 13 Jul 2016 00:00:00Reported by Cloud FoundryType

cloudfoundry🔗 www.cloudfoundry.org👁 41 Views

USN-3012-1 Wget vulnerability in Cloud Foundry. Wget incorrectly handles filenames when redirected from HTTP to FTP, allowing malicious servers to overwrite local files

Reporter	Title	Published	Views	Family All 94
0day.today	GNU Wget < 1.18 - Arbitrary File Upload / Remote Code Execution	6 Jul 201600:00	–	zdt
0day.today	GNU Wget < 1.18 - Arbitrary File Upload / Remote Code Execution Exploit (2)	30 Apr 202100:00	–	zdt
IBM Security Bulletins	Security Bulletin: A vulnerability with GNU wget affects IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data (CVE-2016-4971)	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Base OS issues	1 Mar 202418:03	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in wget affects PowerKVM	18 Jun 201801:34	–	ibm
FreeBSD	wget -- HTTP to FTP redirection file name confusion vulnerability	9 Jun 201600:00	–	freebsd
Tenable Nessus	wget < 1.18 Arbitrary Code Execution	12 Jul 201600:00	–	nessus
Tenable Nessus	Amazon Linux AMI : wget (ALAS-2016-720)	15 Jul 201600:00	–	nessus
Tenable Nessus	CentOS 7 : wget (CESA-2016:2587)	28 Nov 201600:00	–	nessus
Tenable Nessus	Debian DLA-536-1 : wget security update	1 Jul 201600:00	–	nessus

13 Jul 2016 00:00Current

8.5High risk

Vulners AI Score8.5

CVSS 24.3

CVSS 3.18.8

EPSS0.45935