PT-2006-3494 · Gnu · Wget

Published 2006-05-23 · Updated 2018-10-18 · CVE-2006-2548

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Prodder versions prior to 0.5 perlpodder versions prior to 0.5

Description The issue allows remote attackers to execute arbitrary code via shell metacharacters in the URL of a podcast, specifically in the url attribute of an enclosure tag, or the $enc url variable. This code is executed when running wget.

Recommendations For Prodder versions prior to 0.5, update to version 0.5 or later to resolve the issue. For perlpodder versions prior to 0.5, update to version 0.5 or later to resolve the issue. As a temporary workaround, consider restricting the use of the wget command with untrusted URLs until a patch is available.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2006-2548

Affected Products

Wget

References · 15

• 🔥 http://redteam-pentesting.de/advisories/rt-sa-2006-002.php · Exploit
• 🔥 http://redteam-pentesting.de/advisories/rt-sa-2006-003.php · Exploit
• 🔥 https://exploit-db.com/exploits/27902 · Exploit
• 🔥 http://securityfocus.com/bid/18068 · Exploit
• http://vupen.com/english/advisories/2006/1905 · Vendor Advisory
• http://secunia.com/advisories/20208 · Vendor Advisory
• http://sourceforge.net/project/shownotes.php?release_id=418189&group_id=148643 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-2548 · Security Note
• http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0567.html · Note
• http://securityfocus.com/archive/1/434712/100/0/threaded · Note
• http://secunia.com/advisories/20238 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26568 · Note
• http://securityreason.com/securityalert/942 · Note
• http://osvdb.org/25690 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26575 · Note