CVE

Id
9915  
CVE No.
CVE-2004-1487  
Status
Candidate  
Description
wget 1.8.x and 1.9.x allows a remote malicious web server to overwrite certain files via a redirection URL containing a ".." that resolves to the IP address of the malicious server, which bypasses wget"s filtering for ".." sequences.  
Phase
Assigned (20050215)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
67782 9915 CVE-2004-1487 BUGTRAQ:20041209 wget: Arbitrary file overwriting/appending/creating and other vulnerabilities  View
67783 9915 CVE-2004-1487 URL:http://marc.info/?l=bugtraq&m=110269474112384&w=2  View
67784 9915 CVE-2004-1487 MISC:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=261755  View
67785 9915 CVE-2004-1487 REDHAT:RHSA-2005:771  View
67786 9915 CVE-2004-1487 URL:http://www.redhat.com/support/errata/RHSA-2005-771.html  View
67787 9915 CVE-2004-1487 UBUNTU:USN-145-1  View
67788 9915 CVE-2004-1487 URL:http://www.ubuntulinux.org/support/documentation/usn/usn-145-1  View
67789 9915 CVE-2004-1487 BID:11871  View
67790 9915 CVE-2004-1487 URL:http://www.securityfocus.com/bid/11871  View
67791 9915 CVE-2004-1487 OVAL:oval:org.mitre.oval:def:11682  View
67792 9915 CVE-2004-1487 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11682  View
67793 9915 CVE-2004-1487 SECTRACK:1012472  View
67794 9915 CVE-2004-1487 URL:http://securitytracker.com/id?1012472  View
67795 9915 CVE-2004-1487 XF:wget-file-overwrite(18420)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63181 JVNDB-2004-000523 wget の HTTP レスポンスを表示する処理における任意のコードを実行される脆弱性 ------------ CVE-2004-1488 9915 5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000523.html  View