CVSS: 5.0EPSS: 1%CPEs: 5EXPL: 3CVE-2004-1488 – GNU Wget 1.x - Multiple Vulnerabilities
https://notcve.org/view.php?id=CVE-2004-1488
wget 1.8.x and 1.9.x does not filter or quote control characters when displaying HTTP responses to the terminal, which may allow remote malicious web servers to inject terminal escape sequences and execute arbitrary code. wget 1.8.x y 1.9.x no filtra o pone comillas a caractéres de control cuando se muestran respuestas HTTP en el terminal, lo que puede permitir a servidores web maliciosos inyectar secuencias de escape y ejecutar código de su elección. • https://www.exploit-db.com/exploits/24813 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=261755 http://marc.info/?l=bugtraq&m=110269474112384&w=2 http://secunia.com/advisories/20960 http://securitytracker.com/id?1012472 http://www.novell.com/linux/security/advisories/2006_16_sr.html http://www.redhat.com/support/errata/RHSA-2005-771.html http://www.securityfocus.com/bid/11871 https://exchange.xforce.ibmcloud.com/vulnerabilities/18421 https://oval.cisecurity.org/repository&# •
CVSS: 2.6EPSS: 0%CPEs: 9EXPL: 2CVE-2004-2014 – WGet 1.x - Insecure File Creation Race Condition
https://notcve.org/view.php?id=CVE-2004-2014
Wget 1.9 and 1.9.1 allows local users to overwrite arbitrary files via a symlink attack on the name of the file being downloaded. • https://www.exploit-db.com/exploits/24123 http://marc.info/?l=bugtraq&m=108481268725276&w=2 http://marc.info/?l=wget&m=108482747906833&w=2 http://marc.info/?l=wget&m=108483270227139&w=2 http://secunia.com/advisories/17399 http://www.mandriva.com/security/advisories?name=MDKSA-2005:204 http://www.redhat.com/support/errata/RHSA-2005-771.html http://www.securityfocus.com/bid/10361 https://exchange.xforce.ibmcloud.com/vulnerabilities/16167 https://oval.cisecurity.org/ •
CVSS: 5.0EPSS: 8%CPEs: 8EXPL: 0CVE-2002-1344
https://notcve.org/view.php?id=CVE-2002-1344
Directory traversal vulnerability in wget before 1.8.2-4 allows a remote FTP server to create or overwrite files as the wget user via filenames containing (1) /absolute/path or (2) .. (dot dot) sequences. Vulnerabilidad de atravesamiento de directorios en wget anteriores a 1.8.2-4 permite a servidores FTP remotos la creación o sobreescritura de ficheros como usuario wget mediante nombres de ficheros que contengan: direccionamiento absoluto secuencias .. (punto punto) • ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-003.0.txt http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0102.html http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000552 http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000552 http://marc.info/?l=bugtraq&m=103962838628940&w=2 http://marc.info/?l=bugtraq&m=104033016703851&w=2 http://www.ciac.org/ciac/bulletins/n-022.shtml http://www.iss.net/security_center/static/10820.php http://w •
CVSS: 5.0EPSS: 1%CPEs: 1EXPL: 0CVE-1999-0402
https://notcve.org/view.php?id=CVE-1999-0402
wget 1.5.3 follows symlinks to change permissions of the target file instead of the symlink itself. • https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0402 •