Executive Summary



This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.
Informations
Name CVE-2014-4877 First vendor Publication 2014-10-29
Vendor Cve Last vendor Modification 2024-11-21

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score 9.3 Attack Range Network
Cvss Impact Score 10 Attack Complexity Medium
Cvss Expoit Score 8.6 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Absolute path traversal vulnerability in GNU Wget before 1.16, when recursion is enabled, allows remote FTP servers to write to arbitrary files, and consequently execute arbitrary code, via a LIST response that references the same filename within two entries, one of which indicates that the filename is for a symlink.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4877

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE/SANS Top 25)

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:26933
 
Oval ID: oval:org.mitre.oval:def:26933
Title: ELSA-2014-1764 -- wget security update (moderate)
Description: [1.14-10.1] - Fix CVE-2014-4877 wget: FTP symlink arbitrary filesystem access (#1156135)
Family: unix Class: patch
Reference(s): ELSA-2014-1764
CVE-2014-4877
 Version: 3
Platform(s): Oracle Linux 6
Oracle Linux 7
 Product(s): wget
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:27511
 
Oval ID: oval:org.mitre.oval:def:27511
Title: DSA-3062-1 -- wget security update
Description: HD Moore of Rapid7 discovered a symlink attack in Wget, a command-line utility to retrieve files via HTTP, HTTPS, and FTP. The vulnerability allows to create arbitrary files on the user's system when Wget runs in recursive mode against a malicious FTP server. Arbitrary file creation may override content of user's files or permit remote code execution with the user privilege.
Family: unix Class: patch
Reference(s): DSA-3062-1
CVE-2014-4877
 Version: 3
Platform(s): Debian GNU/Linux 7.0
Debian GNU/kFreeBSD 7.0
 Product(s): wget
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:28220
 
Oval ID: oval:org.mitre.oval:def:28220
Title: USN-2393-1 -- Wget vulnerability
Description: HD Moore discovered that Wget contained a path traversal vulnerability when downloading symlinks using FTP. A malicious remote FTP server or a man in the middle could use this issue to cause Wget to overwrite arbitrary files, possibly leading to arbitrary code execution.
Family: unix Class: patch
Reference(s): USN-2393-1
CVE-2014-4877
 Version: 5
Platform(s): Ubuntu 14.10
Ubuntu 14.04
Ubuntu 12.04
Ubuntu 10.04
 Product(s): wget
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:28354
 
Oval ID: oval:org.mitre.oval:def:28354
Title: RHSA-2014:1764 -- wget security update (Moderate)
Description: The wget package provides the GNU Wget file retrieval utility for HTTP, HTTPS, and FTP protocols. A flaw was found in the way Wget handled symbolic links. A malicious FTP server could allow Wget running in the mirror mode (using the '-m' command line option) to write an arbitrary file to a location writable to by the user running Wget, possibly leading to code execution. (CVE-2014-4877) Note: This update changes the default value of the --retr-symlinks option. The file symbolic links are now traversed by default and pointed-to files are retrieved rather than creating a symbolic link locally. Red Hat would like to thank the GNU Wget project for reporting this issue. Upstream acknowledges HD Moore of Rapid7, Inc as the original reporter. All users of wget are advised to upgrade to this updated package, which contains a backported patch to correct this issue.
Family: unix Class: patch
Reference(s): RHSA-2014:1764
CESA-2014:1764-CentOS 7
CESA-2014:1764-CentOS 6
CVE-2014-4877
 Version: 3
Platform(s): Red Hat Enterprise Linux 6
Red Hat Enterprise Linux 7
CentOS Linux 7
CentOS Linux 6
 Product(s): wget
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:28417
 
Oval ID: oval:org.mitre.oval:def:28417
Title: SUSE-SU-2014:1366-1 -- Security update for wget (important)
Description: wget has been updated to fix one security issue and two non-security issues. This security issue has been fixed: * FTP symlink arbitrary filesystem access (CVE-2014-4877). These non-security issues have been fixed: * Fix displaying of download time (bnc#901276). * Fix 0 size FTP downloads after failure (bnc#885069). Security Issues: * CVE-2014-4877 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4877>
Family: unix Class: patch
Reference(s): SUSE-SU-2014:1366-1
CVE-2014-4877
 Version: 3
Platform(s): SUSE Linux Enterprise Server 11
SUSE Linux Enterprise Desktop 11
 Product(s): wget
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:28434
 
Oval ID: oval:org.mitre.oval:def:28434
Title: SUSE-SU-2014:1366-2 -- Security update for wget (important)
Description: wget was updated to fix one security issue and two non-security issues: * FTP symbolic link arbitrary filesystem access (CVE-2014-4877). * Fix displaying of download time (bnc#901276). * Fix 0 size FTP downloads after failure (bnc#885069). Security Issues: * CVE-2014-4877 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4877>
Family: unix Class: patch
Reference(s): SUSE-SU-2014:1366-2
CVE-2014-4877
 Version: 3
Platform(s): SUSE Linux Enterprise Server 11
 Product(s): wget
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:28443
 
Oval ID: oval:org.mitre.oval:def:28443
Title: SUSE-SU-2014:1464-1 -- Security update for wget (moderate)
Description: wget was updated to fix one security issue. This security issue was fixed: - FTP symlink arbitrary filesystem access (CVE-2014-4877).
Family: unix Class: patch
Reference(s): SUSE-SU-2014:1464-1
CVE-2014-4877
 Version: 3
Platform(s): SUSE Linux Enterprise Desktop 12
 Product(s): wget
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:28507
 
Oval ID: oval:org.mitre.oval:def:28507
Title: SUSE-SU-2014:1408-1 -- Security update for wget (important)
Description: wget was updated to fix one security issue: * FTP symbolic link arbitrary filesystem access (CVE-2014-4877). Security Issues: * CVE-2014-4877 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4877>
Family: unix Class: patch
Reference(s): SUSE-SU-2014:1408-1
CVE-2014-4877
 Version: 3
Platform(s): SUSE Linux Enterprise Server 10
 Product(s): wget
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 25

Snort® IPS/IDS

Date Description
2014-12-04 WGet symlink arbitrary file write attempt
RuleID : 32375 - Revision : 3 - Type : BROWSER-OTHER

Nessus® Vulnerability Scanner

Date Description
2015-05-27 Name : The remote SUSE host is missing one or more security updates.
File : suse_SU-2014-1366-2.nasl - Type : ACT_GATHER_INFO
2015-05-20 Name : The remote SUSE host is missing one or more security updates.
File : suse_SU-2014-1464-1.nasl - Type : ACT_GATHER_INFO
2015-05-20 Name : The remote SUSE host is missing one or more security updates.
File : suse_SU-2014-1408-1.nasl - Type : ACT_GATHER_INFO
2015-03-30 Name : The remote Mandriva Linux host is missing a security update.
File : mandriva_MDVSA-2015-121.nasl - Type : ACT_GATHER_INFO
2015-03-26 Name : The remote Debian host is missing a security update.
File : debian_DLA-82.nasl - Type : ACT_GATHER_INFO
2014-12-07 Name : The remote Fedora host is missing a security update.
File : fedora_2014-15347.nasl - Type : ACT_GATHER_INFO
2014-12-04 Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2014-1955.nasl - Type : ACT_GATHER_INFO
2014-12-02 Name : The remote Fedora host is missing a security update.
File : fedora_2014-15405.nasl - Type : ACT_GATHER_INFO
2014-11-26 Name : The remote OracleVM host is missing a security update.
File : oraclevm_OVMSA-2014-0036.nasl - Type : ACT_GATHER_INFO
2014-11-24 Name : The remote Fedora host is missing a security update.
File : fedora_2014-15385.nasl - Type : ACT_GATHER_INFO
2014-11-17 Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-201411-05.nasl - Type : ACT_GATHER_INFO
2014-11-11 Name : The remote openSUSE host is missing a security update.
File : openSUSE-2014-637.nasl - Type : ACT_GATHER_INFO
2014-11-10 Name : The remote FreeBSD host is missing a security-related update.
File : freebsd_pkg_ee7b4f9d66c811e49ae1e8e0b722a85e.nasl - Type : ACT_GATHER_INFO
2014-11-06 Name : The remote SuSE 11 host is missing a security update.
File : suse_11_wget-141105.nasl - Type : ACT_GATHER_INFO
2014-11-06 Name : The remote Amazon Linux AMI host is missing a security update.
File : ala_ALAS-2014-442.nasl - Type : ACT_GATHER_INFO
2014-11-04 Name : The remote Scientific Linux host is missing one or more security updates.
File : sl_20141030_wget_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2014-11-04 Name : The remote Debian host is missing a security-related update.
File : debian_DSA-3062.nasl - Type : ACT_GATHER_INFO
2014-10-31 Name : The remote Ubuntu host is missing a security-related patch.
File : ubuntu_USN-2393-1.nasl - Type : ACT_GATHER_INFO
2014-10-31 Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2014-1764.nasl - Type : ACT_GATHER_INFO
2014-10-31 Name : The remote Oracle Linux host is missing a security update.
File : oraclelinux_ELSA-2014-1764.nasl - Type : ACT_GATHER_INFO
2014-10-31 Name : The remote CentOS host is missing a security update.
File : centos_RHSA-2014-1764.nasl - Type : ACT_GATHER_INFO
2014-10-30 Name : The remote Slackware host is missing a security update.
File : Slackware_SSA_2014-302-01.nasl - Type : ACT_GATHER_INFO
2014-10-30 Name : The remote Mandriva Linux host is missing a security update.
File : mandriva_MDVSA-2014-212.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

http://advisories.mageia.org/MGASA-2014-0431.html
http://git.savannah.gnu.org/cgit/wget.git/commit/?id=18b0979357ed7dc4e11d4f2b...
http://git.savannah.gnu.org/cgit/wget.git/commit/?id=b4440d96cf8173d68ecaa07c...
http://lists.gnu.org/archive/html/bug-wget/2014-10/msg00150.html
http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00004.html
http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00009.html
http://lists.opensuse.org/opensuse-updates/2014-11/msg00026.html
http://rhn.redhat.com/errata/RHSA-2014-1764.html
http://rhn.redhat.com/errata/RHSA-2014-1955.html
http://security.gentoo.org/glsa/glsa-201411-05.xml
http://www.debian.org/security/2014/dsa-3062
http://www.kb.cert.org/vuls/id/685996
http://www.mandriva.com/security/advisories?name=MDVSA-2015:121
http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
http://www.securityfocus.com/bid/70751
http://www.ubuntu.com/usn/USN-2393-1
https://bugzilla.redhat.com/show_bug.cgi?id=1139181
https://community.rapid7.com/community/metasploit/blog/2014/10/28/r7-2014-15-...
https://github.com/rapid7/metasploit-framework/pull/4088
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_n...
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_n...
https://kc.mcafee.com/corporate/index?page=content&id=SB10106
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
Date Informations
2024-11-28 12:41:53
  • Multiple Updates
2021-05-05 01:15:38
  • Multiple Updates
2021-05-04 12:33:00
  • Multiple Updates
2021-04-22 01:40:05
  • Multiple Updates
2020-05-23 01:52:40
  • Multiple Updates
2020-05-23 00:41:41
  • Multiple Updates
2019-03-21 12:01:53
  • Multiple Updates
2019-03-12 12:01:47
  • Multiple Updates
2017-02-17 09:23:52
  • Multiple Updates
2017-01-26 12:04:51
  • Multiple Updates
2017-01-20 09:23:39
  • Multiple Updates
2017-01-03 09:22:53
  • Multiple Updates
2016-10-26 09:22:43
  • Multiple Updates
2016-04-27 01:03:46
  • Multiple Updates
2015-05-28 13:27:50
  • Multiple Updates
2015-05-21 13:31:29
  • Multiple Updates
2015-04-03 09:26:36
  • Multiple Updates
2015-03-31 13:28:41
  • Multiple Updates
2015-03-27 13:28:25
  • Multiple Updates
2014-12-08 13:26:22
  • Multiple Updates
2014-12-07 09:25:58
  • Multiple Updates
2014-12-05 13:27:03
  • Multiple Updates
2014-12-04 21:28:59
  • Multiple Updates
2014-12-03 13:28:22
  • Multiple Updates
2014-11-27 13:28:33
  • Multiple Updates
2014-11-26 13:28:18
  • Multiple Updates
2014-11-21 09:22:07
  • Multiple Updates
2014-11-20 09:23:32
  • Multiple Updates
2014-11-19 05:34:34
  • Multiple Updates
2014-11-18 13:26:08
  • Multiple Updates
2014-11-14 13:28:34
  • Multiple Updates
2014-11-12 13:27:17
  • Multiple Updates
2014-11-11 13:25:59
  • Multiple Updates
2014-11-07 13:26:24
  • Multiple Updates
2014-11-05 13:29:02
  • Multiple Updates
2014-11-05 13:27:58
  • Multiple Updates
2014-11-01 13:26:40
  • Multiple Updates
2014-10-31 13:23:57
  • Multiple Updates
2014-10-29 21:23:54
  • Multiple Updates
2014-10-29 17:23:02
  • First insertion