ID de Prueba:	1.3.6.1.4.1.25623.1.0.812056
Categoría:	Red Hat Local Security Checks
Título:	RedHat Update for wget RHSA-2017:3075-01
Resumen:	The remote host is missing an update for the 'wget'; package(s) announced via the referenced advisory.
Descripción:	Summary: The remote host is missing an update for the 'wget' package(s) announced via the referenced advisory. Vulnerability Insight: The wget packages provide the GNU Wget file retrieval utility for HTTP, HTTPS, and FTP protocols. Security Fix(es): * A stack-based and a heap-based buffer overflow flaws were found in wget when processing chunked encoded HTTP responses. By tricking an unsuspecting user into connecting to a malicious HTTP server, an attacker could exploit these flaws to potentially execute arbitrary code. (CVE-2017-13089, CVE-2017-13090) Red Hat would like to thank the GNU Wget project for reporting these issues. Affected Software/OS: wget on Red Hat Enterprise Linux Server (v. 7) Solution: Please Install the Updated Packages. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2017-13089 BugTraq ID: 101592 http://www.securityfocus.com/bid/101592 Debian Security Information: DSA-4008 (Google Search) http://www.debian.org/security/2017/dsa-4008 https://security.gentoo.org/glsa/201711-06 https://github.com/r1b/CVE-2017-13089 https://www.viestintavirasto.fi/en/cybersecurity/vulnerabilities/2017/haavoittuvuus-2017-037.html RedHat Security Advisories: RHSA-2017:3075 https://access.redhat.com/errata/RHSA-2017:3075 http://www.securitytracker.com/id/1039661 Common Vulnerability Exposure (CVE) ID: CVE-2017-13090 BugTraq ID: 101590 http://www.securityfocus.com/bid/101590
Copyright	Copyright (C) 2017 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.