Symlink Attack in Wget - Security Update
Summary
DSA-3062-1: wget - security update. Affects wget versions < 1.13.4-3+deb7u2. Fixed in 1.13.4-3+deb7u2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Wget is a command-line utility used to retrieve files via HTTP, HTTPS, and FTP. It is commonly used for downloading files from the internet. Wget allows users to recursively download files, which means it can follow links and retrieve files from multiple directories. This feature makes it susceptible to a symlink attack, which can lead to arbitrary file creation and potential remote code execution with user privileges.
Vulnerability Detail
The vulnerability in Wget allows an attacker to create arbitrary files on the user's system when Wget runs in recursive mode against a malicious FTP server. By exploiting this vulnerability, an attacker can override the content of user files or execute remote code with the user's privileges. The issue arises from Wget's default behavior of creating local symbolic links, which can be manipulated by an attacker to create arbitrary files. This vulnerability has been assigned the identifier CVE-2014-4877.
How To Fix
Minimum fixed version
1.13.4-3+deb7u2
This is the first release that contains the fix.
sudo apt-get install --only-upgrade wgetTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. However, users can mitigate the risk by avoiding the use of Wget in recursive mode against untrusted FTP servers.
Conclusion
The symlink attack vulnerability in Wget can be mitigated by upgrading to the fixed versions mentioned above. It is important to promptly apply the security update to ensure the integrity and security of the system. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for wget →
FAQ
Wget is a command-line utility used for retrieving files from the internet via HTTP, HTTPS, and FTP.
A symlink attack is a type of vulnerability where an attacker manipulates symbolic links to create or overwrite arbitrary files on a system.
Recursive mode in Wget allows the utility to follow links and retrieve files from multiple directories.
This vulnerability can lead to arbitrary file creation, overriding of user files, or remote code execution with user privileges.
You can use Vulert's playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability without requiring access to the code or installation.
Related vulnerabilities
Recent vulnerabilities recorded for wget.
