low2.6Public exploit code
CVE-2004-2014
Wget 1.9 and 1.9.1 allows local users to overwrite arbitrary files via a symlink attack on the name of the file being downloaded.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WGet 1.x - Insecure File Creation Race Condition2004-05-17 · local · linux · Verified
Impact
Wget 1.9 and 1.9.1 allows local users to overwrite arbitrary files via a symlink attack on the name of the file being downloaded.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gnu | Wget | Versions 1.5.3, 1.6, 1.7, 1.7.1, 1.8, 1.8.1 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=108481268725276&w=2
- http://marc.info/?l=wget&m=108482747906833&w=2
- http://marc.info/?l=wget&m=108483270227139&w=2
- http://secunia.com/advisories/17399
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:204
- http://www.redhat.com/support/errata/RHSA-2005-771.html
- http://www.securityfocus.com/bid/10361
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16167
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9830
- https://usn.ubuntu.com/145-1/
- http://marc.info/?l=bugtraq&m=108481268725276&w=2
- http://marc.info/?l=wget&m=108482747906833&w=2
- http://marc.info/?l=wget&m=108483270227139&w=2
- http://secunia.com/advisories/17399
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:204
- http://www.redhat.com/support/errata/RHSA-2005-771.html
- http://www.securityfocus.com/bid/10361
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16167
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9830
- https://usn.ubuntu.com/145-1/