CVE-2004-2014
published 2004-12-31CVE-2004-2014: Wget 1.9 and 1.9.1 allows local users to overwrite arbitrary files via a symlink attack on the name of the file being downloaded.
low2.6CVSS 3.1
AVLACHAuNCNIPAP
EXPLOIT
Wget 1.9 and 1.9.1 allows local users to overwrite arbitrary files via a symlink attack on the name of the file being downloaded.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | wget | < wget 1.9.1-12 (bookworm) | wget 1.9.1-12 (bookworm) |
| gnu | wget | — | — |
| gnu | wget | — | — |
| gnu | wget | — | — |
| gnu | wget | — | — |
| gnu | wget | — | — |
| gnu | wget | — | — |
| gnu | wget | — | — |
| gnu | wget | — | — |
| gnu | wget | — | — |
| gnu | wget | >= 0 < 1.9.1-12 | 1.9.1-12 |
| gnu | wget | >= 0 < 1.9.1-12 | 1.9.1-12 |
| gnu | wget | >= 0 < 1.9.1-12 | 1.9.1-12 |
| gnu | wget | >= 0 < 1.9.1-12 | 1.9.1-12 |
CVSS provenance
nvd2.6LOWAV:L/AC:H/Au:N/C:N/I:P/A:P
osv2.6LOW