Lucene search

K
freebsdFreeBSD06F142FF-4DF3-11D9-A9E7-0001020EED82
HistoryDec 09, 2004 - 12:00 a.m.

wget -- multiple vulnerabilities

2004-12-0900:00:00
vuxml.freebsd.org
15

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.019 Low

EPSS

Percentile

88.8%

Jan Minar reports that there exists multiple
vulnerabilities in wget:

Wget erroneously thinks that the current directory is a
fair game, and will happily write in any file in and below
it. Malicious HTTP response or malicious HTML file can
redirect wget to a file that is vital to the system, and
wget will create/append/overwrite it.
Wget apparently has at least two methods of
``sanitizing’’ the potentially malicious data it receives
from the HTTP stream, therefore a malicious redirects can
pass the check. We haven’t find a way to trick wget into
writing above the parent directory, which doesn’t mean
it’s not possible.
Malicious HTTP response can overwrite parts of the
terminal so that the user will not notice anything wrong,
or will believe the error was not fatal.

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.019 Low

EPSS

Percentile

88.8%

Related for 06F142FF-4DF3-11D9-A9E7-0001020EED82