Rapid7 Vulnerability & Exploit Database

CESA-2003:372: wget security update

Back to Search

CESA-2003:372: wget security update

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
06/16/2003
Created
07/25/2018
Added
03/12/2010
Modified
07/04/2017

Description

Updated wget packages that correct a buffer overrun are now available.

GNU Wget is a file-retrieval utility that uses the HTTP and FTP protocols. A buffer overflow in the url_filename function for wget 1.8.1 allows attackers to cause a segmentation fault via a long URL. CentOS does not believe that this issue is exploitable to allow an attacker to be able to run arbitrary code. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2002-1565 to this issue. Users of wget should install the erratum package, which contains a backported security patch and is not vulnerable to this issue.

Solution(s)

  • centos-upgrade-wget

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;