MitreCVELIST:CVE-2015-7665CVE-2015-7665
0.004 Low
EPSS
Percentile
74.1%
Tails before 1.7 includes the wget program but does not prevent automatic fallback from passive FTP to active FTP, which allows remote FTP servers to discover the Tor client IP address by reading a (1) PORT or (2) EPRT command. NOTE: within wget itself, the automatic fallback is not considered a vulnerability by CVE.
References
git.savannah.gnu.org/cgit/wget.git/commit/?id=075d7556964f5a871a73c22ac4b69f5361295099
www.openwall.com/lists/oss-security/2015/10/01/10
www.securityfocus.com/bid/76678
labs.riseup.net/code/issues/10364
lists.gnu.org/archive/html/bug-wget/2015-08/msg00020.html
mailman.boum.org/pipermail/tails-dev/2015-August/009370.html
mailman.boum.org/pipermail/tails-dev/2015-October/009591.html
tails.boum.org/news/version_1.7/index.en.html
Related
