CVEvulnerability

CVE-2004-2014

2.6 LOW Published 2004-12-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-12-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.6 LOW — AV:L/AC:H/Au:N/C:N/I:P/A:P

Description

Wget 1.9 and 1.9.1 allows local users to overwrite arbitrary files via a symlink attack on the name of the file being downloaded.

Affected configurations

• gnu wget 1.5.3 • gnu wget 1.6 • gnu wget 1.7 • gnu wget 1.7.1 • gnu wget 1.8 • gnu wget 1.8.1 • gnu wget 1.8.2 • gnu wget 1.9 • gnu wget 1.9.1

References