ID de Prueba:	1.3.6.1.4.1.25623.1.0.120709
Categoría:	Amazon Linux Local Security Checks
Título:	Amazon Linux: Security Advisory (ALAS-2016-720)
Resumen:	The remote host is missing an update for the 'wget' package(s) announced via the ALAS-2016-720 advisory.
Descripción:	Summary: The remote host is missing an update for the 'wget' package(s) announced via the ALAS-2016-720 advisory. Vulnerability Insight: GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource. (CVE-2016-4971) Affected Software/OS: 'wget' package(s) on Amazon Linux. Solution: Please install the updated package(s). CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2016-4971 1036133 http://www.securitytracker.com/id/1036133 40064 https://www.exploit-db.com/exploits/40064/ 91530 http://www.securityfocus.com/bid/91530 GLSA-201610-11 https://security.gentoo.org/glsa/201610-11 RHSA-2016:2587 http://rhn.redhat.com/errata/RHSA-2016-2587.html USN-3012-1 http://www.ubuntu.com/usn/USN-3012-1 [info-gnu] 20160609 GNU wget 1.18 released http://lists.gnu.org/archive/html/info-gnu/2016-06/msg00004.html http://git.savannah.gnu.org/cgit/wget.git/commit/?id=e996e322ffd42aaa051602da182d03178d0f13e1 http://packetstormsecurity.com/files/162395/GNU-wget-Arbitrary-File-Upload-Code-Execution.html http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html https://bugzilla.redhat.com/show_bug.cgi?id=1343666 https://security.paloaltonetworks.com/CVE-2016-4971 openSUSE-SU-2016:2027 http://lists.opensuse.org/opensuse-updates/2016-08/msg00043.html
Copyright	Copyright (C) 2016 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.