CVE-2016-4971 GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource.
HighCVSS 8.8
EPSS 46.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/wget(Debian:12) | < 1.18-1 | 1.18-1 |
| debian/wget(Debian:13) | < 1.18-1 | 1.18-1 |
| debian/wget(Debian:14) | < 1.18-1 | 1.18-1 |
| GNU wget | < 1.18 | 1.18 |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 15.10 | No fix listed |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
| oracle solaris | = 10 | No fix listed |
| oracle solaris | = 11.3 | No fix listed |
| paloaltonetworks pan-os | >= 6.1.0, <= 6.1.16 | No fix listed |
| paloaltonetworks pan-os | >= 7.0.0, <= 7.0.14 | No fix listed |
| paloaltonetworks pan-os | >= 7.1.0, <= 7.1.9 | No fix listed |
| alpine/wget(Alpine:v3.4) | < 1.17.1-r1 | 1.17.1-r1 |
References
- Debian Security Tracker CVE-2016-4971 vendor-advisory
- bugs.debian.org issue-tracking
- git.savannah.gnu.org patch vendor-advisory
- [info-gnu] 20160609 GNU wget 1.18 released mailing-list patch vendor-advisory
- openSUSE-SU-2016:2027 broken-link vendor-advisory
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- RHSA-2016:2587 broken-link vendor-advisory
- www.oracle.com third-party-advisory
- 91530 third-party-advisory vdb-entry
- 1036133 third-party-advisory vdb-entry
- USN-3012-1 third-party-advisory vendor-advisory
- bugzilla.redhat.com exploit issue-tracking patch third-party-advisory
- GLSA-201610-11 third-party-advisory vendor-advisory
- security.paloaltonetworks.com third-party-advisory
- 40064 exploit third-party-advisory vdb-entry
- security.alpinelinux.org vendor-advisory