CVE-2016-7098
HighSummary
A race condition in wget 1.17 and earlier may allow remote servers to bypass intended access list restrictions when downloading a single file in recursive or mirroring mode.
Risk Assessment
Organizations may be exposed to unauthorized access to files, potentially leading to data leaks or other security threats.
Recommendation
It is recommended to update wget to the latest version to mitigate this vulnerability and review and adjust file access policies.
Other vulnerabilities in wget
See all- CVE-2017-13090High
The retr.c:fd_read_body() function processes OK responses, but in wget versions before 1.19.2, it does not check the length of chunks, which can lead to passing a negative value to fd_read(). This allows an attacker to control the length argument, potentially corrupting malloc metadata.
- CVE-2017-13089High
The http.c:skip_short_body() function in wget before version 1.19.2 does not check the length of response chunks, which can lead to passing a negative value to the fd_read() function. This creates an opportunity for an attacker to control the length argument.
- CVE-1999-0402Medium
Version 1.5.3 of wget follows symlinks, leading to permission changes on the target file instead of the symlink itself.
Original NVD description (English source)
Race condition in wget 1.17 and earlier, when used in recursive or mirroring mode to download a single file, might allow remote servers to bypass intended access list restrictions by keeping an HTTP connection open.