[Tails-dev] SSD Advisory – Wget Arbitrary Commands Execution

このメッセージを削除

このメッセージに返信
著者: Anonymous Remailer (austria)
日付:  
To: tails-dev
新しいトピック: Re: [Tails-dev] SSD Advisory – Wget Arbitrary Commands Execution
題目: [Tails-dev] SSD Advisory – Wget Arbitrary Commands Execution

"Vulnerability Description
A vulnerability in the way wget handles redirects allows attackers that are able to hijack a connection initiated by wget or compromise a server from which wget is downloading files from, would allow them to cause the user running wget to execute arbitrary commands. The commands are executed with the privileges with which wget is running. This could prove to be quite severe when wget is launched as ‘root’.

Vulnerable Version

Wget version 1.17 and prior"

More delish meaty bits:
https://blogs.securiteam.com/index.php/archives/2701