From aab70756942147c2614ce4718cd45e5f83051409 Mon Sep 17 00:00:00 2001 From: xielh Date: Fri, 7 Aug 2020 11:53:39 +0800 Subject: [PATCH] add CVE. --- CVE | 3 +++ 1 file changed, 3 insertions(+) create mode 100644 CVE diff --git a/CVE b/CVE new file mode 100644 index 0000000..2171c8c --- /dev/null +++ b/CVE @@ -0,0 +1,3 @@ +CVE-2018-1000500 +Busybox contains a Missing SSL certificate validation vulnerability in The "busybox wget" applet that can result in arbitrary code execution. +This attack appear to be exploitable via Simply download any file over HTTPS using "busybox wget https://compromised-domain.com/important-file". \ No newline at end of file -- Gitee