CVE-2006-6719
published 2006-12-23CVE-2006-6719: The ftp_syst function in ftp-basic.c in Free Software Foundation (FSF) GNU wget 1.10.2 allows remote attackers to cause a denial of service (application crash)…
PriorityP420medium5CVSS 2.0
AVNACLAuNCNINAP
EXPLOIT
EPSS
3.94%
89.2th percentile
The ftp_syst function in ftp-basic.c in Free Software Foundation (FSF) GNU wget 1.10.2 allows remote attackers to cause a denial of service (application crash) via a malicious FTP server with a large number of blank 220 responses to the SYST command.
Affected
17 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | wget | < wget 1.13-1 (bookworm) | wget 1.13-1 (bookworm) |
| gnu | wget | — | — |
| gnu | wget | — | — |
| gnu | wget | — | — |
| gnu | wget | — | — |
| gnu | wget | — | — |
| gnu | wget | — | — |
| gnu | wget | — | — |
| gnu | wget | — | — |
| gnu | wget | — | — |
| gnu | wget | — | — |
| gnu | wget | — | — |
| gnu | wget | — | — |
| gnu | wget | >= 0 < 1.13-1 | 1.13-1 |
| gnu | wget | >= 0 < 1.13-1 | 1.13-1 |
| gnu | wget | >= 0 < 1.13-1 | 1.13-1 |
| gnu | wget | >= 0 < 1.13-1 | 1.13-1 |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv5.0MEDIUM
vendor_debian5.0LOW
vendor_redhat5.0MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
Wget attempts to dereference NULL pointer upon response from malicious FTP server
vendor_redhat·2006-12-18·CVSS 5.0
CVE-2006-6719 [MEDIUM] Wget attempts to dereference NULL pointer upon response from malicious FTP server
Wget attempts to dereference NULL pointer upon response from malicious FTP server
The ftp_syst function in ftp-basic.c in Free Software Foundation (FSF) GNU wget 1.10.2 allows remote attackers to cause a denial of service (application crash) via a malicious FTP server with a large number of blank 220 responses to the SYST command.
Statement: We do not consider a crash of a client application such as wget to be a security issue.
This flaw was fixed in wget shipped in Red Hat Enterprise Linux 5 before the initial release of the product. Version of wget shipped in Red Hat Enterprise Linux 3 and 4 are affected by this bug.
Debian
CVE-2006-6719: wget - The ftp_syst function in ftp-basic.c in Free Software Foundation (FSF) GNU wget ...
vendor_debian·2006·CVSS 5.0
CVE-2006-6719 [MEDIUM] CVE-2006-6719: wget - The ftp_syst function in ftp-basic.c in Free Software Foundation (FSF) GNU wget ...
The ftp_syst function in ftp-basic.c in Free Software Foundation (FSF) GNU wget 1.10.2 allows remote attackers to cause a denial of service (application crash) via a malicious FTP server with a large number of blank 220 responses to the SYST command.
Scope: local
bookworm: resolved (fixed in 1.13-1)
bullseye: resolved (fixed in 1.13-1)
forky: resolved (fixed in 1.13-1)
sid: resolved (fixed in 1.13-1)
trixie: resolved (fixed in 1.13-1)
GHSA
GHSA-xp2f-5gqq-p6j5: The ftp_syst function in ftp-basic
ghsa_unreviewed·2022-05-01
CVE-2006-6719 [MEDIUM] GHSA-xp2f-5gqq-p6j5: The ftp_syst function in ftp-basic
The ftp_syst function in ftp-basic.c in Free Software Foundation (FSF) GNU wget 1.10.2 allows remote attackers to cause a denial of service (application crash) via a malicious FTP server with a large number of blank 220 responses to the SYST command.
OSV
CVE-2006-6719: The ftp_syst function in ftp-basic
osv·2006-12-23·CVSS 5.0
CVE-2006-6719 [MEDIUM] CVE-2006-6719: The ftp_syst function in ftp-basic
The ftp_syst function in ftp-basic.c in Free Software Foundation (FSF) GNU wget 1.10.2 allows remote attackers to cause a denial of service (application crash) via a malicious FTP server with a large number of blank 220 responses to the SYST command.
No detection rules found.
Bugzilla
CVE-2006-6719 Wget attempts to dereference NULL pointer upon response from malicious FTP server
bugzilla·2007-01-04·CVSS 5.0
CVE-2006-6719 [MEDIUM] CVE-2006-6719 Wget attempts to dereference NULL pointer upon response from malicious FTP server
CVE-2006-6719 Wget attempts to dereference NULL pointer upon response from malicious FTP server
Description of problem:
NULL pointer dereference occurs in case a numerical FTP repsonse code
is present, but response text is missing while wget is expecting a reply
to SYST command in ftp-basic.c:ftp_syst().
Version-Release number of selected component (if applicable):
Wget in all supported releases seems to contain the flawed code.
How reproducible:
Allways.
Steps to Reproduce:
1. Run the attached perl script, it listens to localhost:21 by default
2. Attempt to wget ftp://localhost/
Actual results:
Wget receives a SIGSEGV.
Expected results:
Wget should save us from the time of trial and deliver us from evil.
Additional info:
Upstream didn't fix the issue yet and for it's fairly s
Bugzilla
CVE-2006-6719 Wget attempts to dereference NULL pointer upon response from malicious FTP server
bugzilla·2007-01-04·CVSS 5.0
CVE-2006-6719 [MEDIUM] CVE-2006-6719 Wget attempts to dereference NULL pointer upon response from malicious FTP server
CVE-2006-6719 Wget attempts to dereference NULL pointer upon response from malicious FTP server
+++ This bug was initially created as a clone of Bug #221459 +++
Description of problem:
NULL pointer dereference occurs in case a numerical FTP repsonse code
is present, but response text is missing while wget is expecting a reply
to SYST command in ftp-basic.c:ftp_syst().
Version-Release number of selected component (if applicable):
Wget in all supported releases seems to contain the flawed code.
How reproducible:
Allways.
Steps to Reproduce:
1. Run the attached perl script, it listens to localhost:21 by default
2. Attempt to wget ftp://localhost/
Actual results:
Wget receives a SIGSEGV.
Expected results:
Wget should save us from the time of trial and deliver us from evil.
Additio
Bugzilla
CVE-2006-6719 Wget attempts to dereference NULL pointer upon response from malicious FTP server
bugzilla·2007-01-04·CVSS 5.0
CVE-2006-6719 [MEDIUM] CVE-2006-6719 Wget attempts to dereference NULL pointer upon response from malicious FTP server
CVE-2006-6719 Wget attempts to dereference NULL pointer upon response from malicious FTP server
+++ This bug was initially created as a clone of Bug #221459 +++
Description of problem:
NULL pointer dereference occurs in case a numerical FTP repsonse code
is present, but response text is missing while wget is expecting a reply
to SYST command in ftp-basic.c:ftp_syst().
Version-Release number of selected component (if applicable):
Wget in all supported releases seems to contain the flawed code.
How reproducible:
Allways.
Steps to Reproduce:
1. Run the attached perl script, it listens to localhost:21 by default
2. Attempt to wget ftp://localhost/
Actual results:
Wget receives a SIGSEGV.
Expected results:
Wget should save us from the time of trial and deliver us from evil.
Additio
http://www.mandriva.com/security/advisories?name=MDKSA-2007:017http://www.securityfocus.com/bid/21650https://issues.rpath.com/browse/RPL-930https://www.exploit-db.com/exploits/2947http://www.mandriva.com/security/advisories?name=MDKSA-2007:017http://www.securityfocus.com/bid/21650https://issues.rpath.com/browse/RPL-930https://www.exploit-db.com/exploits/2947
2006-12-23
Published