Detections
Analytics
GNU WGet < 1.10.2 Buffer Overflow
high Log Correlation Engine Plugin ID 800982
Synopsis
The remote host is vulnerable to a buffer overflow.Description
The remote host is using a version of wget that contains a flaw in the way that it handles NTLM authentication data. Specifically, a rogue website that returns malformed data during an NTLM authentication session will be able to execute arbitrary code on the local client machine.Solution
Upgrade to version 1.10.2 or higher.Plugin Details
Severity: High
ID: 800982
Family: Web Clients
Reference Information
CVE: CVE-2005-2337, CVE-2005-2628, CVE-2005-3185, CVE-2005-4077, CVE-2006-0024, CVE-2006-1439, CVE-2006-1440, CVE-2006-1441, CVE-2006-1442, CVE-2006-1443, CVE-2006-1444, CVE-2006-1445, CVE-2006-1446, CVE-2006-1447, CVE-2006-1448, CVE-2006-1449, CVE-2006-1450, CVE-2006-1451, CVE-2006-1452, CVE-2006-1453, CVE-2006-1454, CVE-2006-1455, CVE-2006-1456, CVE-2006-1457, CVE-2006-1552, CVE-2006-1614, CVE-2006-1615, CVE-2006-1630, CVE-2006-1982, CVE-2006-1983, CVE-2006-1984, CVE-2006-1985