Unrated
Busybox contains a Missing SSL certificate validation vulnerability in The "busybox wget" applet that can result in arbitrary code execution. This att...
CVE-2018-1000500
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Alpine Linux ALPINE-CVE-2018-1000500 busybox Fixed in: 1.28.3-r2
- Debian DEBIAN-CVE-2018-1000500 busybox
Original description The description as published by the source.
Busybox contains a Missing SSL certificate validation vulnerability in The "busybox wget" applet that can result in arbitrary code execution. This attack appear to be exploitable via Simply download any file over HTTPS using "busybox wget https://compromised-domain.com/important-file".
References
- advisory lists.busybox.net
- patch git.busybox.net
- web usn.ubuntu.com