Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2004-1487
Description:wget 1.8.x and 1.9.x allows a remote malicious web server to overwrite certain files via a redirection URL containing a ".." that resolves to the IP address of the malicious server, which bypasses wget's filtering for ".." sequences.
Test IDs: 1.3.6.1.4.1.25623.1.0.52277   1.3.6.1.4.1.25623.1.0.65205  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2004-1487
BugTraq ID: 11871
http://www.securityfocus.com/bid/11871
Bugtraq: 20041209 wget: Arbitrary file overwriting/appending/creating and other vulnerabilities (Google Search)
http://marc.info/?l=bugtraq&m=110269474112384&w=2
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=261755
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11682
RedHat Security Advisories: RHSA-2005:771
http://www.redhat.com/support/errata/RHSA-2005-771.html
http://securitytracker.com/id?1012472
https://usn.ubuntu.com/145-1/
XForce ISS Database: wget-file-overwrite(18420)
https://exchange.xforce.ibmcloud.com/vulnerabilities/18420




© 1998-2024 E-Soft Inc. All rights reserved.