CentOS Update for wget CESA-2014:1764 centos6

Check the version of wget SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882071";...

wget security update

CentOS Errata and Security Advisory CESA-2014:1764 An updated wget package that fixes one security issue is now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score,...

Mandriva Linux Security Advisory : wget (MDVSA-2014:212)

Updated wget package fixes security vulnerability : Wget was susceptible to a symlink attack which could create arbitrary files, directories or symbolic links and set their permissions when retrieving a directory recursively through FTP CVE-2014-4877. The default settings in wget have been change...

CVE-2014-4877: Wget FTP Symlink Attack Vulnerability

The open-source Wget application which is most widely used on Linux and Unix systems for retrieving files from the web has found vulnerable to a critical flaw. GNU Wget is a command-line utility designed to retrieve files from the Web using HTTP, HTTPS, and FTP, the most widely used Internet...

CVE-2014-4877

Consolidated details for CVE-2014-4877: GNU Wget before 1.16 is vulnerable when recursion is enabled. A crafted LIST response from a remote FTP server can cause Wget to write to arbitrary files and, consequently, execute arbitrary code due to a symlink-related directory listing that references th...

MGASA-2014-0431 Updated wget packages fix CVE-2014-4877

Updated wget package fixes security vulnerability: Wget was susceptible to a symlink attack which could create arbitrary files, directories or symbolic links and set their permissions when retrieving a directory recursively through FTP CVE-2014-4877. The default settings in wget have been changed...

GNU Wget FTP Symlink Arbitrary Filesystem Access

This module exploits a vulnerability in Wget when used in recursive -r mode with a FTP server as a destination. A symlink is used to allow arbitrary writes to the target's filesystem. To specify content for the file, use the "file:/path" syntax for the TARGETDATA option. Tested successfully with...

CVE-2012-4877

CVE-2012-4877 describes a cross-site request forgery (CSRF) in FlatnuX CMS, affecting version 2011 08.09.2 and earlier. The vulnerability resides in controlcenter.php and enables remote attackers to hijack the authentication of administrators for requests that add new user accounts. The provided ...

CVE-2012-4877

Cross-site request forgery CSRF vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that add user accounts...

CVE-2012-4877

creationtimestamp| type| source ---|---|--- 2012-04-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37035...

CVE-2011-4877

HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 aka TIA portal; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime, when Transfer Mode is enabled, allows remote attackers to cau...

CVE-2011-4877

CVE-2011-4877 affects Siemens WinCC flexible products (2004–2008) and related SIMATIC HMI panels, WinCC V11 Runtime Advanced, and WinCC flexible Runtime. The issue lies in HmiLoad in the runtime loader; when Transfer Mode is enabled, sending crafted data over TCP can cause a remote denial of serv...

KLA10394 Multiple vulnerabilities in Siemens

Multiple critical vulnerabilities have been found in Siemens products. Malicious users can exploit these vulnerabilities to read & modify arbitrary files, cause denial of service, execute arbitrary code, bypass authentication, obtain access and inject arbitrary HTTP headers. Below is a complete...

CVE-2011-4877

creationtimestamp| type| source ---|---|--- 2011-11-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18166...

CVE-2010-4877

creationtimestamp| type| source ---|---|--- 2010-09-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34563...

CVE-2009-4877

Multiple cross-site request forgery CSRF vulnerabilities in WebGUI before 7.7.14 allow remote attackers to hijack the authentication of users for unspecified requests via unknown vectors...

CVE-2009-4877

CVE-2009-4877 describes multiple CSRF weaknesses in WebGUI prior to version 7.7.14 that enable remote attackers to hijack user authentication for unspecified requests via unknown vectors. The affected product is WebGUI (before 7.7.14); the vulnerability’s exact exploit method, affected components...

CVE-2008-4877

CVE-2008-4877 describes a SQL injection in WebCards 1.3, specifically in admin.php, exploitable when magic_quotes_gpc is disabled. The vulnerability allows remote attackers to manipulate the underlying SQL via the user parameter, potentially causing arbitrary SQL execution. This is documented acr...

CVE-2008-4877

creationtimestamp| type| source ---|---|--- 2008-10-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6869...

CVE-2005-4877

Openfire 2.3.0 Beta 2 (formerly Wildfire) is affected by CVE-2005-4877, a cross-site scripting (XSS) vulnerability in the login form (login.jsp) of the admin console. The issue arises from the username parameter, where remote attackers can inject arbitrary web script or HTML via Javascript events...