CVE-2004-2014

2004-12-3105:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

wget

symlink attack

local users

cve-2004-2014

nvd

6.1 Medium

AI Score

Confidence

Low

2.6 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:N/C:N/I:P/A:P

0.0004 Low

EPSS

Percentile

9.3%

JSON

Wget 1.9 and 1.9.1 allows local users to overwrite arbitrary files via a symlink attack on the name of the file being downloaded.

CPENameOperatorVersion
gnu:wgetgnu wgeteq1.8.2
gnu:wgetgnu wgeteq1.7
gnu:wgetgnu wgeteq1.9
gnu:wgetgnu wgeteq1.6
gnu:wgetgnu wgeteq1.8
gnu:wgetgnu wgeteq1.8.1
gnu:wgetgnu wgeteq1.9.1
gnu:wgetgnu wgeteq1.7.1
gnu:wgetgnu wgeteq1.5.3

CPE	Name	Operator	Version
gnu:wget	gnu wget	eq	1.8.2
gnu:wget	gnu wget	eq	1.7
gnu:wget	gnu wget	eq	1.9
gnu:wget	gnu wget	eq	1.6
gnu:wget	gnu wget	eq	1.8
gnu:wget	gnu wget	eq	1.8.1
gnu:wget	gnu wget	eq	1.9.1
gnu:wget	gnu wget	eq	1.7.1
gnu:wget	gnu wget	eq	1.5.3