Back to search
CVE-2018-0494
Published: May 6, 2018
Modified: Aug 5, 2024
PUBLISHED
Description
GNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in http.c via a \r\n sequence in a continuation line.
| Vendor | Product | Versions |
|---|---|---|
n/a | WGet | affected WGet |
References
https://sintonen.fi/advisories/gnu-wget-cookie-injection.txt
x_refsource_MISC
RHSA-2018:3052
vendor-advisory
x_refsource_REDHAT
https://savannah.gnu.org/bugs/?53763
x_refsource_MISC
GLSA-201806-01
vendor-advisory
x_refsource_GENTOO
DSA-4195
vendor-advisory
x_refsource_DEBIAN
104129
vdb-entry
x_refsource_BID
1040838
vdb-entry
x_refsource_SECTRACK
44601
exploit
x_refsource_EXPLOIT-DB
USN-3643-2
vendor-advisory
x_refsource_UBUNTU
[debian-lts-announce] 20180511 [SECURITY] [DLA 1375-1] wget security update
mailing-list
x_refsource_MLIST
USN-3643-1
vendor-advisory
x_refsource_UBUNTU
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now