NetSight
IP …
medium6.5Public exploit code

CVE-2018-0494

GNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in http.c via a \r\n sequence in a continuation line.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

GNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in http.c via a \r\n sequence in a continuation line.

Affected products

VendorProductAffected versions
GnuWget
before 1.19.5
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04, 17.10, 18.04
DebianDebian Linux
Versions 7.0, 8.0, 9.0
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Workstation
Version 7.0

Weakness classification

CWE-20

References