Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

Ubuntu 16.04 LTS: USN-3012-1 Moderate: Wget File Overwrite

ubuntu
Calendar Grey June 20, 2016
Scroller Ubuntu
The Ubuntu Security Advisory USN-3012-1 addresses the wget file overwrite vulnerability and provides guidance for updates.
Wget could be made to overwrite files.

Summary

Wget could be made to overwrite files.

Software Description:

- wget: retrieves files from the web

Details:

Dawid Golunski discovered that Wget incorrectly handled filenames when

being redirected from an HTTP to an FTP URL. A malicious server could

possibly use this issue to overwrite local files.

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS:
  wget                            1.17.1-1ubuntu1.1

Ubuntu 15.10:
  wget                            1.16.1-1ubuntu1.1

Ubuntu 14.04 LTS:
  wget                            1.15-1ubuntu1.14.04.2

Ubuntu 12.04 LTS:
  wget                            1.13.4-2ubuntu1.4

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-3012-1

CVE-2016-4971

Severity
important
Lowest
Low
Medium
High
Critical

June 20, 2016

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.