Network tool wget was found to have security vulnerabilities (cve-2014-4877)

#漏洞预警 # Popular Network tool wget was found to have a security vulnerability (cve-2014-4877).

When wget is used to recursively download an FTP site, an attacker can trigger the vulnerability by constructing a malicious symbolic link file that creates arbitrary files, directories, or symbolic links and sets access permissions on the wget user's system. Please pay attention to the use of their own version of the update, timely installation of patches/upgrades.


The Mitre CVE Dictionary explains this question as follows: * * RESERVED * * This candidate has been the RESERVED by a organization or individual that would use it W Hen announcing a new security problem. When the candidate has been publicized, the details for this candidate would be provided.

Solution:


Upgrade to wget 1.16.
http://ftp.gnu.org/gnu/wget/