Vulnerability Details : CVE-2004-2014

Wget 1.9 and 1.9.1 allows local users to overwrite arbitrary files via a symlink attack on the name of the file being downloaded.

Published 2004-12-31 05:00:00

Updated 2018-10-03 21:29:29

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2004-2014

Probability of exploitation activity in the next 30 days: 0.04%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 8 % EPSS Score History EPSS FAQ

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Source
2.6	LOW	AV:L/AC:H/Au:N/C:N/I:P/A:P	1.9	4.9	nvd@nist.gov
Access Vector: Local Access Complexity: High Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: Partial

GNU » Wget » Version: 1.5.3
cpe:2.3:a:gnu:wget:1.5.3:*:*:*:*:*:*:*
Matching versions
GNU » Wget » Version: 1.8
cpe:2.3:a:gnu:wget:1.8:*:*:*:*:*:*:*
Matching versions
GNU » Wget » Version: 1.8.1
cpe:2.3:a:gnu:wget:1.8.1:*:*:*:*:*:*:*
Matching versions
GNU » Wget » Version: 1.6
cpe:2.3:a:gnu:wget:1.6:*:*:*:*:*:*:*
Matching versions
GNU » Wget » Version: 1.8.2
cpe:2.3:a:gnu:wget:1.8.2:*:*:*:*:*:*:*
Matching versions
GNU » Wget » Version: 1.7
cpe:2.3:a:gnu:wget:1.7:*:*:*:*:*:*:*
Matching versions
GNU » Wget » Version: 1.7.1
cpe:2.3:a:gnu:wget:1.7.1:*:*:*:*:*:*:*
Matching versions
GNU » Wget » Version: 1.9
cpe:2.3:a:gnu:wget:1.9:*:*:*:*:*:*:*
Matching versions
GNU » Wget » Version: 1.9.1
cpe:2.3:a:gnu:wget:1.9.1:*:*:*:*:*:*:*
Matching versions