Anfälligkeitssuche        Suche in 172616 CVE Beschreibungen
und 81291 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.850756
Kategorie:SuSE Local Security Checks
Titel:SUSE: Security Advisory for wget (SUSE-SU-2014:1366-1)
Zusammenfassung:The remote host is missing an update for the 'wget'; package(s) announced via the referenced advisory.
Beschreibung:Summary:
The remote host is missing an update for the 'wget'
package(s) announced via the referenced advisory.

Vulnerability Insight:
wget has been updated to fix one security issue and two non-security
issues.

This security issue has been fixed:

* FTP symlink arbitrary filesystem access (CVE-2014-4877).

These non-security issues have been fixed:

* Fix displaying of download time (bnc#901276).

* Fix 0 size FTP downloads after failure (bnc#885069).

Affected Software/OS:
wget on SUSE Linux Enterprise Server 11 SP3

Solution:
Please install the updated package(s).

CVSS Score:
9.3

CVSS Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2014-4877
BugTraq ID: 70751
http://www.securityfocus.com/bid/70751
CERT/CC vulnerability note: VU#685996
http://www.kb.cert.org/vuls/id/685996
Debian Security Information: DSA-3062 (Google Search)
http://www.debian.org/security/2014/dsa-3062
http://security.gentoo.org/glsa/glsa-201411-05.xml
http://www.mandriva.com/security/advisories?name=MDVSA-2015:121
https://community.rapid7.com/community/metasploit/blog/2014/10/28/r7-2014-15-gnu-wget-ftp-symlink-arbitrary-filesystem-access
https://github.com/rapid7/metasploit-framework/pull/4088
http://lists.gnu.org/archive/html/bug-wget/2014-10/msg00150.html
RedHat Security Advisories: RHSA-2014:1764
http://rhn.redhat.com/errata/RHSA-2014-1764.html
RedHat Security Advisories: RHSA-2014:1955
http://rhn.redhat.com/errata/RHSA-2014-1955.html
SuSE Security Announcement: SUSE-SU-2014:1366 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00004.html
SuSE Security Announcement: SUSE-SU-2014:1408 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00009.html
SuSE Security Announcement: openSUSE-SU-2014:1380 (Google Search)
http://lists.opensuse.org/opensuse-updates/2014-11/msg00026.html
http://www.ubuntu.com/usn/USN-2393-1
CopyrightCopyright (C) 2015 Greenbone Networks GmbH

Dies ist nur einer von 81291 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2020 E-Soft Inc. Alle Rechte vorbehalten.