Test ID:	1.3.6.1.4.1.25623.1.0.892086
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DLA-2086-1)
Summary:	The remote host is missing an update for the Debian 'wget' package(s) announced via the DLA-2086-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'wget' package(s) announced via the DLA-2086-1 advisory. Vulnerability Insight: An issue has been found in wget, a tool to retrieve files from the web. A race condition might occur as files rejected by an access list are kept on the disk for the duration of a HTTP connection. For Debian 8 Jessie, this problem has been fixed in version 1.16-1+deb8u7. We recommend that you upgrade your wget packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: [link moved to references] Affected Software/OS: 'wget' package(s) on Debian 8. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-7098 40824 https://www.exploit-db.com/exploits/40824/ 93157 http://www.securityfocus.com/bid/93157 [bug-wget] 20160814 Wget - acess list bypass / race condition PoC http://lists.gnu.org/archive/html/bug-wget/2016-08/msg00083.html [bug-wget] 20160824 Re: Wget - acess list bypass / race condition PoC http://lists.gnu.org/archive/html/bug-wget/2016-08/msg00134.html [debian-lts-announce] 20200129 [SECURITY] [DLA 2086-1] wget security update https://lists.debian.org/debian-lts-announce/2020/01/msg00031.html [oss-security] 20160827 Re: CVE Request - Gnu Wget 1.17 - Design Error Vulnerability http://www.openwall.com/lists/oss-security/2016/08/27/2 openSUSE-SU-2016:2284 http://lists.opensuse.org/opensuse-updates/2016-09/msg00044.html openSUSE-SU-2017:0015 http://lists.opensuse.org/opensuse-updates/2017-01/msg00007.html
Copyright	Copyright (C) 2020 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.