CVE:CVE-2016-4971
CNNVD:CNNVD-201606-485
GNU Wget是美国GNU社区的一套用于在网络上进行下载的自由软件，它支持通过HTTP、HTTPS以及FTP这三个最常见的TCP/IP协议下载。
GNU Wget存在安全漏洞。攻击者利用该漏洞通过将请求从HTTP重定向到特制的FTP资源来写入任意文件。
solution:Upgrade gnu wget to a higher version than 1.18,and avoid the version (,1.18); Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,15.10,16.04,and avoid the version 12.04,14.04,15.10,16.04; Upgrade oracle solaris to a higher version than 10,11.3,and avoid the version 10,11.3; Upgrade paloaltonetworks pan-os to a higher version than 6.1.16,7.0.14,7.1.9,and avoid the version [6.1.0,6.1.16],[7.0.0,7.0.14],[7.1.0,7.1.9]