Package wget updated to version 1.18-alt1 for branch p8 in task 165774.

Published: 2016-06-30

BDU:2016-01680

Уязвимость менеджера загрузок GNU Wget, позволяющая нарушителю изменять произвольные файлы

Severity: MEDIUM (4.3) Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

References:

Published: 2016-06-30
Modified: 2025-04-12

CVE-2016-4971

GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource.

Severity: MEDIUM (4.3) Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: HIGH (8.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

Version: 2.1.2