[Tails-dev] SSD Advisory – Wget Arbitrary Commands Execution

Üzenet törlése

Válasz az üzenetre
Szerző: Anonymous Remailer (austria)
Dátum:  
Címzett: tails-dev
Új témák: Re: [Tails-dev] SSD Advisory – Wget Arbitrary Commands Execution
Tárgy: [Tails-dev] SSD Advisory – Wget Arbitrary Commands Execution

"Vulnerability Description
A vulnerability in the way wget handles redirects allows attackers that are able to hijack a connection initiated by wget or compromise a server from which wget is downloading files from, would allow them to cause the user running wget to execute arbitrary commands. The commands are executed with the privileges with which wget is running. This could prove to be quite severe when wget is launched as ‘root’.

Vulnerable Version

Wget version 1.17 and prior"

More delish meaty bits:
https://blogs.securiteam.com/index.php/archives/2701