Wget Vulnerability Allows Server-Side Request Forgery via FTP PASV Response

A vulnerability in Wget was identified, where it fails to validate IP addresses in FTP PASV responses. This flaw allows remote attackers controlling a malicious FTP server or an HTTP server redirecting to an FTP URL to redirect Wget's data connection to arbitrary addresses. This could lead to server-side request forgery, potentially exposing localhost services or internal network resources. The affected versions include multiple Ubuntu releases, with specific package versions outlined for updates. Users are advised to perform a standard system update to mitigate the issue. The vulnerability is documented as USN-8572-1.

Key Points: • Wget's failure to validate FTP PASV response IP addresses poses a serious security risk. • Remote attackers can exploit this vulnerability for server-side request forgery. • Affected Ubuntu versions require immediate updates to mitigate the risk.