FreeBSD : wget -- Access List Bypass / Race Condition (479c5b91-b6cc-11e6-a04e-3417eb99b9a0)
Medium Nessus Plugin ID 95418
SynopsisThe remote FreeBSD host is missing a security-related update.
DescriptionDawid Golunski reports :
GNU wget in version 1.17 and earlier, when used in mirroring/recursive mode, is affected by a Race Condition vulnerability that might allow remote attackers to bypass intended wget access list restrictions specified with -A parameter.
SolutionUpdate the affected package.