CVE-2016-7098
- State
- Published
- Severity
- Not scored
- Published
- Sep 26, 2016
- Updated
- Aug 6, 2024
- Reserved
- Aug 26, 2016
Description
Race condition in wget 1.17 and earlier, when used in recursive or mirroring mode to download a single file, might allow remote servers to bypass intended access list restrictions by keeping an HTTP connection open.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- [oss-security] 20160827 Re: CVE Request - Gnu Wget 1.17 - Design Error Vulnerabilitymailing-list
- openSUSE-SU-2017:0015vendor-advisory
- openSUSE-SU-2016:2284vendor-advisory
- 93157vdb-entry
- 40824exploit
- [bug-wget] 20160814 Wget - acess list bypass / race condition PoCmailing-list
- [bug-wget] 20160824 Re: Wget - acess list bypass / race condition PoCmailing-list
- [debian-lts-announce] 20200129 [SECURITY] [DLA 2086-1] wget security updatemailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.