108 matches found
CVE-2017-13089
The http.c:skipshortbody function is called in some circumstances, such as when processing redirects. When the response is sent chunked in wget before 1.19.2, the chunk parser uses strtol to read each chunk's length, but doesn't check that the chunk length is a non-negative number. The code then...
GNU Wget Buffer Overflow Vulnerability
GNU Wget is a set of free software developed by the GNU Project for downloading over the Internet, which supports downloading over the three most common TCP/IP protocols: HTTP, HTTPS, and FTP. A buffer overflow vulnerability exists in versions of GNU Wget prior to 1.19.2. A remote attacker could...
GNU Wget Buffer Error Vulnerability
GNU Wget is a set of free software developed by the GNU Project for downloading over the Internet, which supports downloading over the three most common TCP/IP protocols: HTTP, HTTPS, and FTP. A buffer overflow vulnerability exists in versions of GNU Wget prior to 1.19.2. A remote attacker could...
UBUNTU-CVE-2017-13089
The http.c:skipshortbody function is called in some circumstances, such as when processing redirects. When the response is sent chunked in wget before 1.19.2, the chunk parser uses strtol to read each chunk's length, but doesn't check that the chunk length is a non-negative number. The code then...
DEBIAN-CVE-2012-4382
MediaWiki before 1.18.5, and 1.19.x before 1.19.2 does not properly protect user block metadata, which allows remote administrators to read a user block reason via a reblock attempt...
DEBIAN-CVE-2012-4379
MediaWiki before 1.18.5, and 1.19.x before 1.19.2 does not send a restrictive X-Frame-Options HTTP header, which allows remote attackers to conduct clickjacking attacks via an embedded API response in an IFRAME element...
CVE-2012-4382
CVE-2012-4382 affects MediaWiki prior to 1.18.5 and 1.19.x prior to 1.19.2. The issue is that user block metadata is not properly protected, allowing remote administrators to read a user block reason via a reblock attempt. The CVSS data indicates a network attack vector with low complexity and pa...