Test ID:	1.3.6.1.4.1.25623.1.0.53857
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-209)
Summary:	The remote host is missing an update for the Debian 'wget' package(s) announced via the DSA-209 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'wget' package(s) announced via the DSA-209 advisory. Vulnerability Insight: Two problems have been found in the wget package as distributed in Debian GNU/Linux: Stefano Zacchiroli found a buffer overrun in the url_filename function, which would make wget segfault on very long URLs Steven M. Christey discovered that wget did not verify the FTP server response to a NLST command: it must not contain any directory information, since that can be used to make an FTP client overwrite arbitrary files. Both problems have been fixed in version 1.5.3-3.1 for Debian GNU/Linux 2.2/potato and version 1.8.1-6.1 for Debian GNU/Linux 3.0/woody. Affected Software/OS: 'wget' package(s) on Debian 3.0. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2002-1344 BugTraq ID: 6352 http://www.securityfocus.com/bid/6352 BugTraq ID: 6360 http://www.securityfocus.com/bid/6360 Bugtraq: 20021211 Directory Traversal Vulnerabilities in FTP Clients (Google Search) http://marc.info/?l=bugtraq&m=103962838628940&w=2 Bugtraq: 20021219 TSLSA-2002-0089 - wget (Google Search) http://marc.info/?l=bugtraq&m=104033016703851&w=2 Caldera Security Advisory: CSSA-2003.003.0 http://www.securityfocus.com/archive/1/307045/30/26300/threaded CERT/CC vulnerability note: VU#210148 http://www.kb.cert.org/vuls/id/210148 Computer Incident Advisory Center Bulletin: N-022 http://www.ciac.org/ciac/bulletins/n-022.shtml Conectiva Linux advisory: CLA-2002:552 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000552 Conectiva Linux advisory: CLSA-2002:552 http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000552 Debian Security Information: DSA-209 (Google Search) https://www.debian.org/security/2002/dsa-209 http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-086.php http://www.openpkg.com/security/advisories/OpenPKG-SA-2003.007.html http://www.redhat.com/support/errata/RHSA-2002-229.html http://www.redhat.com/support/errata/RHSA-2002-256.html SCO Security Bulletin: CSSA-2003-003.0 ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-003.0.txt http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0102.html http://www.iss.net/security_center/static/10820.php
Copyright	Copyright (C) 2008 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.