Vulnerability Bulletins

IBM Security Bulletin: PowerKVM wget Vulnerability - CVE-2014-4877

   
Affected software IBM
 
In PowerKVM, GNU Wget could allow a remote attacker to launch a symlink attack. CVE(s): CVE-2014-4877 Affected product(s) and affected version(s): PowerKVM 2.1 Refer to the following reference URLs for remediation and additional vulnerability details: Source Bulletin: http://www.ibm.com/support/docview.wss?uid=isg3T1021954 X-Force Database: http://xforce.iss.net/xforce/xfdb/97778

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_powerkvm_wget_vulnerability_cve_2014_4877?lang=en_us