Red Hat Security AdvisoryRHSA-2014:1764
wget security update
Released 2014-10-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) wget-1.14-10.el7_0.1
- Red Hat Enterprise Linux ComputeNode (v. 7) wget-1.14-10.el7_0.1
- Red Hat Enterprise Linux Desktop (v. 6) wget-1.12-5.el6_6.1
- Red Hat Enterprise Linux HPC Node (v. 6) wget-1.12-5.el6_6.1
- Red Hat Enterprise Linux Server (v. 6) wget-1.12-5.el6_6.1
- Red Hat Enterprise Linux Server (v. 7) wget-1.14-10.el7_0.1
- Red Hat Enterprise Linux Workstation (v. 6) wget-1.12-5.el6_6.1
- Red Hat Enterprise Linux Workstation (v. 7) wget-1.14-10.el7_0.1
Fixes 1 record
Priority HIGH 68
Absolute path traversal vulnerability in GNU Wget before 1.16, when recursion is enabled, allows remote FTP servers to write to arbitrary files, and consequently execute arbitrary code, via a LIST response that reference…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.39883 · Published 2014-10-29 · Partial fix CWE-22
