Skip to Content.
Sympa Menu

sm-spell-submit - [SM-Spell-Submit]securty fix: wget

sm-spell-submit AT lists.ibiblio.org

Subject: Submit list for new spells

List archive

Chronological Thread  
  • From: shivaken <shivaken AT jcom.home.ne.jp>
  • To: sm-spell-submit AT lists.ibiblio.org
  • Subject: [SM-Spell-Submit]securty fix: wget
  • Date: Thu, 12 Dec 2002 18:51:27 +0900

Hi, a security hole is found in wget.

> A vulnerability in all versions of wget prior to and including 1.8.2
> was discovered by Steven M. Christey. The bug permits a malicious
> FTP server to create or overwriet files anywhere on the local file
> system by sending filenames beginning with "/" or containing "/../".
> This can be used to make vulnerable FTP clients write files that can
> later be used for attack against the client machine.

http://marc.theaimsgroup.com/?l=bugtraq&m=87602746719482
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2002-1344
http://linuxtoday.com/news_story.php3?ltsn=2002-12-12-012-26-NW-MD-SW

This spell contains patch (from mandrake's source rpm).

Attachment: wget.tar.bz2
Description: application/tbz



  • [SM-Spell-Submit]securty fix: wget, shivaken, 12/12/2002

Archive powered by MHonArc 2.6.24.

Top of Page