Main Vulnerability Database Vulnerabilities #VU32275

#VU32275 Security Features in wget - CVE-2016-4971

Published: June 30, 2016 / Updated: June 17, 2021

Vulnerability identifier: #VU32275

Vulnerability risk: High

CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Amber

CVE-ID: CVE-2016-4971

CWE-ID: CWE-254

Exploitation vector: Remote access

Exploit availability: Public exploit is available

Vulnerable software:
wget

Software vendor:
GNU

Description

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource.

Install update from vendor's website.