Wget Vulnerability Allows Server-Side Request Forgery via FTP PASV Response

• •Wget's failure to validate FTP PASV response IP addresses poses a serious security risk.
• •Remote attackers can exploit this vulnerability for server-side request forgery.
• •Affected Ubuntu versions require immediate updates to mitigate the risk.

A vulnerability in Wget was identified, where it fails to validate IP addresses in FTP PASV responses. This flaw allows remote attackers controlling a malicious FTP server or an HTTP server redirecting to an FTP URL to redirect Wget's data connection to arbitrary addresses. This could lead to server-side request forgery, potentially exposing localhost services or internal network resources. The affected versions include multiple Ubuntu releases, with specific package versions outlined for updates. Users are advised to perform a standard system update to mitigate the issue. The vulnerability is documented as USN-8572-1.