Test Kennung:	1.3.6.1.4.1.25623.1.0.882793
Kategorie:	CentOS Local Security Checks
Titel:	CentOS Update for wget CESA-2017:3075 centos7
Zusammenfassung:	Check the version of wget
Beschreibung:	Summary: Check the version of wget Vulnerability Insight: The wget packages provide the GNU Wget file retrieval utility for HTTP, HTTPS, and FTP protocols. Security Fix(es): * A stack-based and a heap-based buffer overflow flaws were found in wget when processing chunked encoded HTTP responses. By tricking an unsuspecting user into connecting to a malicious HTTP server, an attacker could exploit these flaws to potentially execute arbitrary code. (CVE-2017-13089, CVE-2017-13090) Red Hat would like to thank the GNU Wget project for reporting these issues. Affected Software/OS: wget on CentOS 7 Solution: Please Install the Updated Packages. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2017-13089 BugTraq ID: 101592 http://www.securityfocus.com/bid/101592 Debian Security Information: DSA-4008 (Google Search) http://www.debian.org/security/2017/dsa-4008 https://security.gentoo.org/glsa/201711-06 https://github.com/r1b/CVE-2017-13089 https://www.viestintavirasto.fi/en/cybersecurity/vulnerabilities/2017/haavoittuvuus-2017-037.html RedHat Security Advisories: RHSA-2017:3075 https://access.redhat.com/errata/RHSA-2017:3075 http://www.securitytracker.com/id/1039661 Common Vulnerability Exposure (CVE) ID: CVE-2017-13090 BugTraq ID: 101590 http://www.securityfocus.com/bid/101590
Copyright	Copyright (C) 2017 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.