CVE-2004-2014

Wget 1.9 and 1.9.1 allows local users to overwrite arbitrary files via a symlink attack on the name of the file being downloaded.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:gnu:wget:1.5.3:*:*:*:*:*:*:*
cpe:2.3:a:gnu:wget:1.6:*:*:*:*:*:*:*
cpe:2.3:a:gnu:wget:1.7:*:*:*:*:*:*:*
cpe:2.3:a:gnu:wget:1.7.1:*:*:*:*:*:*:*
cpe:2.3:a:gnu:wget:1.8:*:*:*:*:*:*:*
cpe:2.3:a:gnu:wget:1.8.1:*:*:*:*:*:*:*
cpe:2.3:a:gnu:wget:1.8.2:*:*:*:*:*:*:*
cpe:2.3:a:gnu:wget:1.9:*:*:*:*:*:*:*
cpe:2.3:a:gnu:wget:1.9.1:*:*:*:*:*:*:*

History

No history.

Information

Published : 2004-12-31 05:00

Updated : 2023-12-10 10:17


NVD link : CVE-2004-2014

Mitre link : CVE-2004-2014

CVE.ORG link : CVE-2004-2014


JSON object : View

Products Affected

gnu

  • wget