Bug 144214

Summary: CAN-2004-1487 Several wget vulnerabilities (CAN-2004-1488)
Product: Red Hat Enterprise Linux 4 Reporter: Josh Bressers <bressers>
Component: wgetAssignee: Karsten Hopp <karsten>
Status: CLOSED ERRATA QA Contact: David Lawrence <dkl>
Severity: low Docs Contact:
Priority: medium    
Version: 4.0CC: security-response-team
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard: impact=low,public=20041210,source=bugtraq,reported=20041210
Fixed In Version: RHSA-2005-771 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2005-09-27 16:09:14 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Josh Bressers 2005-01-05 02:22:44 UTC
*** This bug has been split off bug 142832 ***

------- Original comment by Moritz Barsnick on 2004.12.14 11:07 -------

Description of problem:
According to Bugtraq there are several quite severe wget 
vulnerabilities.

See http://seclists.org/lists/bugtraq/2004/Dec/0105.html .

Debian has a patch for one of the four (or so) problems:
http://bugs.debian.org/261755
http://bugs.debian.org/cgi-bin/bugreport.cgi/wget-filter-controls.
patch.v3--multibyte-aware?bug=261755&msg=48&att=1

Comment 4 Red Hat Bugzilla 2005-09-27 16:09:15 UTC
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHSA-2005-771.html