Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2014-4877HistoryOct 29, 2014 - 10:55 a.m.
CVE-2014-4877
2014-10-2910:55:00
Debian Security Bug Tracker
security-tracker.debian.org
9
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.078 Low
EPSS
Percentile
94.1%
Absolute path traversal vulnerability in GNU Wget before 1.16, when recursion is enabled, allows remote FTP servers to write to arbitrary files, and consequently execute arbitrary code, via a LIST response that references the same filename within two entries, one of which indicates that the filename is for a symlink.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | wget | < 1.16-1 | wget_1.16-1_all.deb |
| Debian | 11 | all | wget | < 1.16-1 | wget_1.16-1_all.deb |
| Debian | 10 | all | wget | < 1.16-1 | wget_1.16-1_all.deb |
| Debian | 999 | all | wget | < 1.16-1 | wget_1.16-1_all.deb |
| Debian | 13 | all | wget | < 1.16-1 | wget_1.16-1_all.deb |
Related
f5
f5
SOL15897 - Wget vulnerability CVE-2014-4877
2014-12-08 00:00:00
K15897 : Wget vulnerability CVE-2014-4877
2014-12-08 00:00:00
nessus
nessus
RHEL 6 : wget (RHSA-2014:1955)
2014-12-04 00:00:00
GLSA-201411-05 : GNU Wget: Arbitrary code execution
2014-11-17 00:00:00
Debian DLA-82-1 : wget security update
2015-03-26 00:00:00
cert
cert
GNU Wget creates arbitrary symbolic links during recursive FTP download
2014-10-28 00:00:00
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2014-442)
2015-09-08 00:00:00
SUSE: Security Advisory (SUSE-SU-2014:1366-2)
2021-06-09 00:00:00
SUSE: Security Advisory for wget (SUSE-SU-2014:1366-2)
2015-10-16 00:00:00
slackware
slackware
[slackware-security] wget
2014-10-29 19:00:23
checkpoint_advisories
checkpoint_advisories
GNU wget FTP Remote File Creation (CVE-2014-4877)
2015-08-02 00:00:00
ubuntucve
ubuntucve
CVE-2014-4877
2014-10-29 00:00:00
thn
thn
CVE-2014-4877: Wget FTP Symlink Attack Vulnerability
2014-10-29 22:45:00
amazon
amazon
Medium: wget
2014-11-05 12:19:00
fedora
fedora
[SECURITY] Fedora 20 Update: wget-1.16-3.fc20
2014-11-22 12:34:29
[SECURITY] Fedora 19 Update: wget-1.16-3.fc19
2014-12-01 19:07:20
[SECURITY] Fedora 21 Update: wget-1.16-3.fc21
2014-12-06 10:47:36
veracode
veracode
Remote Code Execution (RCE)
2019-01-15 09:02:36
suse
suse
Security update for wget (important)
2014-11-06 12:05:30
Security update for wget (important)
2014-11-12 19:04:43
Security update for wget (important)
2014-11-12 19:05:28
osv
osv
wget - security update
2014-11-01 00:00:00
wget - security update
2014-11-03 00:00:00
debian
debian
[SECURITY] [DLA 82-1] wget security update
2014-11-03 21:18:28
[SECURITY] [DSA 3062-1] wget security update
2014-11-02 21:06:47
archlinux
archlinux
wget: arbitrary filesystem access
2014-10-29 00:00:00
cve
cve
CVE-2014-4877
2014-10-29 10:55:00
redhat
redhat
(RHSA-2014:1764) Moderate: wget security update
2014-10-30 00:00:00
(RHSA-2014:1955) Moderate: wget security update
2014-12-03 00:00:00
centos
centos
wget security update
2014-10-30 17:44:21
oraclelinux
oraclelinux
wget security update
2014-10-30 00:00:00
wget security and bug fix update
2016-11-09 00:00:00
ubuntu
ubuntu
Wget vulnerability
2014-10-30 00:00:00
gentoo
gentoo
GNU Wget: Arbitrary code execution
2014-11-16 00:00:00
freebsd
freebsd
wget -- path traversal vulnerability in recursive FTP mode
2014-10-27 00:00:00
securityvulns
securityvulns
wget symbolic links vulnerability
2014-11-03 00:00:00
[ MDVSA-2014:212 ] wget
2014-11-03 00:00:00
prion
prion
Path traversal
2014-10-29 10:55:00
zdt
zdt
GNU Wget FTP Symlink Arbitrary Filesystem Access Exploit
2014-11-01 00:00:00
mageia
mageia
Updated wget packages fix CVE-2014-4877
2014-10-28 14:33:36
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.078 Low
EPSS
Percentile
94.1%
Related for DEBIANCVE:CVE-2014-4877