Test ID:	1.3.6.1.4.1.25623.1.0.51450
Category:	Conectiva Local Security Checks
Title:	Conectiva Security Advisory CLA-2003:716
Summary:	NOSUMMARY
Description:	Description: The remote host is missing updates announced in advisory CLA-2003:716. GNU wget is a freely available network utility to retrieve files using HTTP and FTP. Stefano Zacchirol found a buffer overflow vulnerability in the code that handles URLs in wget. An attacker can create a long (more than 256 characters), specially crafted URL that when parsed by wget can cause the execution of arbitrary code or program misbehavior. The packages included in this update fix the problem by unconditionally terminating long URLs in all cases. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2003-1565 to this issue[1]. Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1565 http://www.securityspace.com/smysecure/catid.html?in=CLA-2003:716 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=002003 Risk factor : High CVSS Score: 7.5
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2003-1565 Common Vulnerability Exposure (CVE) ID: CVE-2002-1565 Bugtraq: 20030604 Immunix Secured OS 7+ wget update (Google Search) http://marc.info/?l=bugtraq&m=105474357016184&w=2 Caldera Security Advisory: CSSA-2003-003.0 Conectiva Linux advisory: CLA-2003:716 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000716 Debian Security Information: DSA-209 (Google Search) http://www.debian.org/security/2002/dsa-209 http://www.redhat.com/support/errata/RHSA-2003-372.html SCO Security Bulletin: CSSA-2003-003.0 ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-003.0.txt SCO Security Bulletin: CSSA-2003-025.0 SGI Security Advisory: 20040202-01-U ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc XForce ISS Database: wget-url-filename-bo(10851) https://exchange.xforce.ibmcloud.com/vulnerabilities/10851
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.