Signature Detail
Short Name |
FTP:SYMLINKS-WGET-INPT-VALID |
|---|---|
Severity |
High |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
FTP |
Keywords |
GNU wget FTP Remote File Creation |
Release Date |
2014/11/10 |
Update Number |
2439 |
Supported Platforms |
idp-4.0+, isg-3.4+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
FTP: GNU wget FTP Remote File Creation
Wget is having an input validation error. Upon successful exploitation, arbitrary files, directories or symlinks with attacker-desired permissions are created on the target system.
References
- CVE: CVE-2014-4877