CVE-2004-1487 wget 1.8.x and 1.9.x allows a remote malicious web server to overwrite certain files via a redirection URL containing a ".." that resolves to the IP address of the malicious server, which bypasses wge...
MediumCVSS 5.0
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
wget 1.8.x and 1.9.x allows a remote malicious web server to overwrite certain files via a redirection URL containing a ".." that resolves to the IP address of the malicious server, which bypasses wget's filtering for ".." sequences.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU wget | = 1.8 | No fix listed |
| GNU wget | = 1.8.1 | No fix listed |
| GNU wget | = 1.8.2 | No fix listed |
| GNU wget | = 1.9 | No fix listed |
| GNU wget | = 1.9.1 | No fix listed |
| debian/wget(Debian:12) | < 1.9.1-11 | 1.9.1-11 |
| debian/wget(Debian:13) | < 1.9.1-11 | 1.9.1-11 |
| debian/wget(Debian:14) | < 1.9.1-11 | 1.9.1-11 |
References
- bugs.debian.org exploit vendor-advisory
- 20041209 wget: Arbitrary file overwriting/appending/creating and other vulnerabilities mailing-list
- 1012472 vdb-entry
- RHSA-2005:771 vendor-advisory
- 11871 exploit vdb-entry vendor-advisory
- wget-file-overwrite(18420) vdb-entry
- oval:org.mitre.oval:def:11682 signature vdb-entry
- USN-145-1 vendor-advisory
- Debian Security Tracker CVE-2004-1487 vendor-advisory