Secunia

Description

Immunix has issued updated packages for wget, which fixes two older vulnerabilities.

The first vulnerability is caused due to wget not properly verifying responses received from FTP servers. This can be exploited to traverse directories by using "../", which allows remote FTP server to overwrite local files.

A boundary error has also been identified in the code handling URLs. This can be exploited to cause a buffer overflow by supplying a long URL. However, this has not been proven as remotely exploitable.

Solution
Updated package (Immunix 7+):
Further details available in Customer Area

Original Advisory
http://mail.wirex.com/pipermail/immunix-users/2003-June:/0766.html

Deep Links
Links available in Customer Area