Submit list for new spells

[shivaken <shivaken AT jcom.home.ne.jp>]

Hi, a security hole is found in wget.

> A vulnerability in all versions of wget prior to and including 1.8.2
> was discovered by Steven M. Christey.  The bug permits a malicious
> FTP server to create or overwriet files anywhere on the local file
> system by sending filenames beginning with "/" or containing "/../".
> This can be used to make vulnerable FTP clients write files that can
> later be used for attack against the client machine.

http://marc.theaimsgroup.com/?l=bugtraq&m=87602746719482
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2002-1344
http://linuxtoday.com/news_story.php3?ltsn=2002-12-12-012-26-NW-MD-SW

This spell contains patch (from mandrake's source rpm).

Attachment: wget.tar.bz2
Description: application/tbz