漏洞描述
GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
www.oracle.comhttp://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html↗www.securitytracker.comhttp://www.securitytracker.com/id/1036133↗git.savannah.gnu.orghttp://git.savannah.gnu.org/cgit/wget.git/commit/?id=e996e322ffd42aaa051602da182d03178d0f13e1↗packetstormsecurity.comhttp://packetstormsecurity.com/files/162395/GNU-wget-Arbitrary-File-Upload-Code-Execution.html↗security.paloaltonetworks.comhttps://security.paloaltonetworks.com/CVE-2016-4971↗rhn.redhat.comhttp://rhn.redhat.com/errata/RHSA-2016-2587.html↗security.gentoo.orghttps://security.gentoo.org/glsa/201610-11↗lists.opensuse.orghttp://lists.opensuse.org/opensuse-updates/2016-08/msg00043.html↗lists.gnu.orghttp://lists.gnu.org/archive/html/info-gnu/2016-06/msg00004.html↗bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=1343666↗www.ubuntu.comhttp://www.ubuntu.com/usn/USN-3012-1↗www.securityfocus.comhttp://www.securityfocus.com/bid/91530↗