GNU wget CVE-2018-20483 Local Information Disclosure Vulnerability
BID:106358
CVE-2018-20483 |Info
GNU wget CVE-2018-20483 Local Information Disclosure Vulnerability
| Bugtraq ID: | 106358 |
| Class: | Design Error |
| CVE: |
CVE-2018-20483 |
| Remote: | No |
| Local: | Yes |
| Published: | Dec 26 2018 12:00AM |
| Updated: | Feb 27 2019 11:00AM |
| Credit: | GNU Wget project. |
| Vulnerable: |
Redhat Enterprise Linux 7 Haxx Curl 7.62 Haxx Curl 7.61.1 Haxx Curl 7.61 Haxx Curl 7.60 Haxx Curl 7.63.0 Haxx Curl 7.6.1 Haxx Curl 7.6 GNU wget 1.19.5 GNU wget 1.19.4 GNU wget 1.19.3 GNU wget 1.19.2 GNU wget 1.19.1 GNU wget 1.11.4 GNU wget 1.11.3 GNU wget 1.11.2 GNU wget 1.11.1 GNU wget 1.10.2 GNU wget 1.10.1 GNU wget 1.10 GNU wget 1.8.2 GNU wget 1.8.1 GNU wget 1.8 GNU wget 1.7.1 GNU wget 1.7 GNU wget 1.6 GNU wget 1.5.3 GNU wget 1.20 GNU wget 1.19 GNU wget 1.18 GNU wget 1.17 GNU wget 1.16.3 GNU wget 1.16 GNU wget 1.15 GNU wget 1.12 GNU wget 1.11 |
| Not Vulnerable: |
Haxx Curl 7.64.0 GNU wget 1.20.1 |
Discussion
GNU wget CVE-2018-20483 Local Information Disclosure Vulnerability
GNU wget is prone to a local information-disclosure vulnerability.
Attackers can exploit this issue to obtain sensitive information that may aid in further attacks.
GNU Wget versions prior to 1.20.1 are vulnerable.
GNU wget is prone to a local information-disclosure vulnerability.
Attackers can exploit this issue to obtain sensitive information that may aid in further attacks.
GNU Wget versions prior to 1.20.1 are vulnerable.
Exploit / POC
GNU wget CVE-2018-20483 Local Information Disclosure Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
GNU wget CVE-2018-20483 Local Information Disclosure Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
GNU wget CVE-2018-20483 Local Information Disclosure Vulnerability
References:
References:
- GNU Homepage (GNU)
- Bug 1662705 (CVE-2018-20483) - CVE-2018-20483 wget: Information exposure in set ()
- xattr: strip credentials from any URL that is stored ()
- xattr: strip credentials from any URL that is stored #3433 ()
- [security] Do not store username/password in extended attributes when enabling - ()
- 106358 ()
- cgit logo index : wget.git ()
- Curl 7.64.0 ()