← back
CVE-2016-7098

CVE-2016-7098

EPSS 7.5%
Race condition in wget 1.17 and earlier, when used in recursive or mirroring mode to download a single file, might allow remote servers to bypass intended access list restrictions by keeping an HTTP connection open.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencewww.exploit-db.com/exploits/40824/unverifiedexploitdbwww.exploit-db.com/exploits/40824unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://lists.gnu.org/archive/html/bug-wget/2016-08/msg00083.htmlhttp://lists.gnu.org/archive/html/bug-wget/2016-08/msg00134.htmlhttp://lists.opensuse.org/opensuse-updates/2016-09/msg00044.htmlhttp://lists.opensuse.org/opensuse-updates/2017-01/msg00007.htmlhttps://lists.debian.org/debian-lts-announce/2020/01/msg00031.htmlhttps://www.exploit-db.com/exploits/40824/http://www.openwall.com/lists/oss-security/2016/08/27/2http://www.securityfocus.com/bid/93157