Description
wget 1.8.x and 1.9.x does not filter or quote control characters when displaying HTTP responses to the terminal, which may allow remote malicious web servers to inject terminal escape sequences and execute arbitrary code.
Affected products
- gnu / wget1.8 – 1.8
- gnu / wget1.8.1 – 1.8.1
- gnu / wget1.8.2 – 1.8.2
- gnu / wget1.9 – 1.9
- gnu / wget1.9.1 – 1.9.1
Exploits & proofs of concept
- exploit-dbGNU Wget 1.x - Multiple Vulnerabilitiesby Jan Minar
References
- MISChttp://www.redhat.com/support/errata/RHSA-2005-771.html
- MISChttp://www.securityfocus.com/bid/11871
- MAILING_LISThttp://marc.info/?l=bugtraq&m=110269474112384&w=2
- VENDOR_ADVISORYhttps://usn.ubuntu.com/145-1/
- VENDOR_ADVISORYhttp://www.novell.com/linux/security/advisories/2006_16_sr.html
- MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/18421
- VENDOR_ADVISORYhttp://bugs.debian.org/cgi-bin/bugreport.cgi?bug=261755
- MISChttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9750
- VENDOR_ADVISORYhttp://secunia.com/advisories/20960
- MISChttp://securitytracker.com/id?1012472
Updated 25m ago · 8 sources