Security Advisory

CVE-2004-1487

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2005-02-15 05:00:00

Last updated 2024-08-08 00:53:24

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

wget 1.8.x and 1.9.x allows a remote malicious web server to overwrite certain files via a redirection URL containing a ".." that resolves to the IP address of the malicious server, which bypasses wget's filtering for ".." sequences.

← Browse all CVEs View on cve.org ↗