Security Features in wget

Vulnerability identifier: #VU32275

Vulnerability risk: High

CVSSv4.0: 7.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Amber]

CVE-ID: CVE-2016-4971

CWE-ID: CWE-254

Exploitation vector: Network

Exploit availability: Yes

Vulnerable software:
wget
Server applications / File servers (FTP/HTTP)

Vendor: GNU

Description

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource.

Mitigation
Install update from vendor's website.

Vulnerable software versions

wget: 1.5.3 - 1.17.1

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.

#VU32275 Security Features in wget - CVE-2016-4971