Red Hat Security Advisory

RHSA-2014:0151

wget security and bug fix update

Released 2014-02-10 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop (v. 6) wget-1.12-1.11.el6_5
Red Hat Enterprise Linux HPC Node (v. 6) wget-1.12-1.11.el6_5
Red Hat Enterprise Linux Server (v. 6) wget-1.12-1.11.el6_5
Red Hat Enterprise Linux Workstation (v. 6) wget-1.12-1.11.el6_5

Fixes 1 record

TI-2010-02161 CVE-2010-2252 · GHSA-hqjw-x4mf-w7v2

GNU Wget 1.12 and earlier uses a server-provided filename instead of the original URL to…

LOW 37

GNU Wget 1.12 and earlier uses a server-provided filename instead of the original URL to determine the destination filename of a download, which allows remote servers to create or overwrite arbitrary files via a 3xx redi…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.04214 Published 2010-07-06 Partial fix CWE-20