Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2010-2252
HistoryJul 06, 2010 - 5:17 p.m.

CVE-2010-2252

2010-07-0617:17:13
CWE-20
[email protected]
web.nvd.nist.gov
1

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.7 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.3%

JSON

GNU Wget 1.12 and earlier uses a server-provided filename instead of the original URL to determine the destination filename of a download, which allows remote servers to create or overwrite arbitrary files via a 3xx redirect to a URL with a .wgetrc filename followed by a 3xx redirect to a URL with a crafted filename, and possibly execute arbitrary code as a consequence of writing to a dotfile in a home directory.

Affected configurations

NVD
Node
gnuwgetRange≤1.12
OR
gnuwgetMatch1.5.3
OR
gnuwgetMatch1.6
OR
gnuwgetMatch1.7
OR
gnuwgetMatch1.7.1
OR
gnuwgetMatch1.8
OR
gnuwgetMatch1.8.1
OR
gnuwgetMatch1.8.2
OR
gnuwgetMatch1.9
OR
gnuwgetMatch1.9.1
OR
gnuwgetMatch1.10
OR
gnuwgetMatch1.10.1
OR
gnuwgetMatch1.10.2
OR
gnuwgetMatch1.11
OR
gnuwgetMatch1.11.1
OR
gnuwgetMatch1.11.2
OR
gnuwgetMatch1.11.3
OR
gnuwgetMatch1.11.4

References

Related

centos 1
securityvulns 1
redhat 1
oraclelinux 1
nessus 15
openvas 15
ubuntucve 1
gentoo 1
ubuntu 1
debian 1
debiancve 1
cve 1
cvelist 1
freebsd 1
prion 1
centos
centos
wget security update
2014-02-11 10:54:14
securityvulns
securityvulns
wget unsafe files creation
2011-10-16 00:00:00
redhat
redhat
(RHSA-2014:0151) Low: wget security and bug fix update
2014-02-10 00:00:00
oraclelinux
oraclelinux
wget security and bug fix update
2014-02-10 00:00:00
nessus
nessus
RHEL 3 : wget (Unpatched Vulnerability)
2024-06-03 00:00:00
Mandriva Linux Security Advisory : wget (MDVSA-2010:170)
2010-09-03 00:00:00
Ubuntu 6.06 LTS / 8.04 LTS / 9.04 / 9.10 / 10.04 LTS : wget vulnerability (USN-982-1)
2010-09-03 00:00:00
openvas
openvas
FreeBSD Ports: wget, wget-devel
2010-10-10 00:00:00
Debian Security Advisory DSA 2088-1 (wget)
2010-08-21 00:00:00
Gentoo Security Advisory GLSA 201110-10 (Wget)
2012-02-12 00:00:00
ubuntucve
ubuntucve
CVE-2010-2252
2010-07-06 00:00:00
gentoo
gentoo
Wget: User-assisted file creation or overwrite
2011-10-13 00:00:00
ubuntu
ubuntu
Wget vulnerability
2010-09-02 00:00:00
debian
debian
[SECURITY] [DSA 2088-1] New wget packages fix potential code execution
2010-08-05 05:29:36
debiancve
debiancve
CVE-2010-2252
2010-07-06 17:17:13
cve
cve
CVE-2010-2252
2010-07-06 17:17:13
cvelist
cvelist
CVE-2010-2252
2010-07-06 14:00:00
freebsd
freebsd
wget -- multiple HTTP client download filename vulnerability
2010-06-09 00:00:00
prion
prion
Directory traversal
2010-07-06 17:17:00

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.7 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.3%

JSON
Related for NVD:CVE-2010-2252
centos1securityvulns1redhat1oraclelinux1nessus15openvas15ubuntucve1gentoo1ubuntu1debian1debiancve1cve1cvelist1freebsd1prion1