Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -7 articles for you...
198
security advisoryhigh severityarbitrary overwriteArch Linux ASA-201606-19 High Severity: Wget Arbitrary File Overwrite
The package wget before version 1.18-1 is vulnerable to arbitrary file overwrite that could lead to potential code execution. . Arch Linux Security Advisory ASA-201606-19 ========================================= Severity: High Date : 2016-06-20 CVE-ID : CVE-2016-4971 Package : wget Type : arbitrary file overwrite Remote : Yes Link : https://wiki.archlinux.org/title/CVE Summary ====== The package wget before version 1.18-1 is vulnerable to arbitrary file overwrite that could lead to potential code execution. Resolution ========= Upgrade to 1.18-1. # pacman -Syu "wget> =1.18-1" The problem has been fixed upstream in version 1.18. Workaround ========= None. Description ========== GNU Wget when supplied with a malicious website link can be tricked into saving an arbitrary remote file supplied by an attacker, with arbitrary content and filename under the current directory. This can lead to potential code execution by creating system scripts (such as .bash_profile and others) within home directory as well as other unauthorized actions (such as request sniffing by proxy modification, or arbitrary system file retrieval) by uploading .wgetrc configuration file. Because of this vulnerability, an attacker is able to overwrite an arbitrary file in the victim's current directory. Impact ===== A remote attacker is able to overwrite an arbitrary file in the victim's current directory that could potentially lead to code execution by creating system scripts that are executed. References ========= https://access.redhat.com/security/cve/CVE-2016-4971 https://bugs.archlinux.org/task/49730 . The Arch Linux Security Notice ASA-201707-32 highlights critical vulnerabilities within the curl package that may allow for remote command execution.. Arch Linux Security,wget Update,Arbitrary File Overwrite,Security Risk. . LinuxSecurity.com Team
Jun 20, 2016
ArchLinux
98
security advisoryarbitrary code executionRed Hat Enterprise LinuxRed Hat 6: RHSA-2014:0151-01 Low: wget File Issue and Update
An updated wget package that fixes one security issue and one bug is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Low [More...]. ==================================================================== Red Hat Security Advisory Synopsis: Low: wget security and bug fix update Advisory ID: RHSA-2014:0151-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2014:0151.html Issue date: 2014-02-10 CVE Names: CVE-2010-2252 ==================================================================== 1. Summary: An updated wget package that fixes one security issue and one bug is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Low security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Desktop (v. 6) - i386, x86_64 Red Hat Enterprise Linux HPC Node (v. 6) - x86_64 Red Hat Enterprise Linux Server (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64 3. Description: The wget package provides the GNU Wget file retrieval utility for HTTP, HTTPS, and FTP protocols. Wget provides various useful features, such as the ability to work in the background while the user is logged out, recursive retrieval of directories, file name wildcard matching or updating files in dependency on file timestamp comparison. It was discovered that wget used a file name provided by the server when saving a downloaded file. This could cause wget to create a file with a different name than expected, possibly allowing the server to execute arbitrary code on the client. (CVE-2010-2252) Note: With this update, wget always uses the last component of the original URL as the name for the downloaded file. Previousbehavior of using the server provided name or the last component of the redirected URL when creating files can be re-enabled by using the '--trust-server-names' command line option, or by setting 'trust_server_names=on' in the wget start-up file. This update also fixes the following bugs: * Prior to this update, the wget package did not recognize HTTPS SSL certificates with alternative names (subjectAltName) specified in the certificate as valid. As a consequence, running the wget command failed with a certificate error. This update fixes wget to recognize such certificates as valid. (BZ#1060113) All users of wget are advised to upgrade to this updated package, which contain backported patches to correct these issues. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 602797 - CVE-2010-2252 wget: multiple HTTP client download filename vulnerability [OCERT 2010-001] 833831 - When redirected, wget should use the original page name for saving 6. Package List: Red Hat Enterprise Linux Desktop (v. 6): Source: i386: wget-1.12-1.11.el6_5.i686.rpm wget-debuginfo-1.12-1.11.el6_5.i686.rpm x86_64: wget-1.12-1.11.el6_5.x86_64.rpm wget-debuginfo-1.12-1.11.el6_5.x86_64.rpm Red Hat Enterprise Linux HPC Node (v. 6): Source: x86_64: wget-1.12-1.11.el6_5.x86_64.rpm wget-debuginfo-1.12-1.11.el6_5.x86_64.rpm Red Hat Enterprise Linux Server (v. 6): Source: i386: wget-1.12-1.11.el6_5.i686.rpm wget-debuginfo-1.12-1.11.el6_5.i686.rpm ppc64: wget-1.12-1.11.el6_5.ppc64.rpm wget-debuginfo-1.12-1.11.el6_5.ppc64.rpm s390x: wget-1.12-1.11.el6_5.s390x.rpm wget-debuginfo-1.12-1.11.el6_5.s390x.rpm x86_64: wget-1.12-1.11.el6_5.x86_64.rpm wget-debuginfo-1.12-1.11.el6_5.x86_64.rpm Red Hat Enterprise Linux Workstation (v.6): Source: i386: wget-1.12-1.11.el6_5.i686.rpm wget-debuginfo-1.12-1.11.el6_5.i686.rpm x86_64: wget-1.12-1.11.el6_5.x86_64.rpm wget-debuginfo-1.12-1.11.el6_5.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/#package 7. References: https://access.redhat.com/security/cve/CVE-2010-2252 https://access.redhat.com/security/updates/classification/#low 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2014 Red Hat, Inc. . Recent revision of curl for Fedora tackles vulnerabilities and resolves bugs. Update today for enhanced download security!. Red Hat Enterprise Linux,wget security,Red Hat update,wget bug fix,file retrieval safety. . Severity: Low. LinuxSecurity.com Team
Feb 10, 2014
•Low
Red Hat
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!