CVE-2014-4877 Absolute path traversal vulnerability in GNU Wget before 1.16, when recursion is enabled, allows remote FTP servers to write to arbitrary files, and consequently execute arbitrary code, via a LIST res...
HighCVSS 9.3
EPSS 39.9%
Framework module
- Published
- Updated
- Exploit status
- Public exploit available
Description
Absolute path traversal vulnerability in GNU Wget before 1.16, when recursion is enabled, allows remote FTP servers to write to arbitrary files, and consequently execute arbitrary code, via a LIST response that references the same filename within two entries, one of which indicates that the filename is for a symlink.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/wget(Debian:12) | < 1.16-1 | 1.16-1 |
| debian/wget(Debian:13) | < 1.16-1 | 1.16-1 |
| debian/wget(Debian:14) | < 1.16-1 | 1.16-1 |
| GNU wget | <= 1.15 | No fix listed |
| GNU wget | = 1.12 | No fix listed |
| GNU wget | = 1.13 | No fix listed |
| GNU wget | = 1.13.1 | No fix listed |
| GNU wget | = 1.13.2 | No fix listed |
| GNU wget | = 1.13.3 | No fix listed |
| GNU wget | = 1.13.4 | No fix listed |
| GNU wget | = 1.14 | No fix listed |
References
- Debian Security Tracker CVE-2014-4877 vendor-advisory
- bugs.debian.org issue-tracking
- advisories.mageia.org
- git.savannah.gnu.org
- git.savannah.gnu.org patch
- [bug-wget] 20141027 GNU wget 1.16 released mailing-list patch
- SUSE-SU-2014:1366 vendor-advisory
- SUSE-SU-2014:1408 vendor-advisory
- openSUSE-SU-2014:1380 vendor-advisory
- RHSA-2014:1764 vendor-advisory
- RHSA-2014:1955 vendor-advisory
- GLSA-201411-05 vendor-advisory
- DSA-3062 vendor-advisory
- VU#685996 patch third-party-advisory us-government-resource
- MDVSA-2015:121 vendor-advisory
- www.oracle.com
- 70751 vdb-entry
- USN-2393-1 vendor-advisory
- bugzilla.redhat.com patch
- community.rapid7.com exploit
- github.com exploit
- h20566.www2.hpe.com
- h20566.www2.hpe.com
- kc.mcafee.com