Unrated severityNVD Advisory· Published Dec 31, 2004· Updated Apr 16, 2026
CVE-2004-2014
CVE-2004-2014
Description
Wget 1.9 and 1.9.1 allows local users to overwrite arbitrary files via a symlink attack on the name of the file being downloaded.
Affected products
9cpe:2.3:a:gnu:wget:1.5.3:*:*:*:*:*:*:*+ 8 more
- cpe:2.3:a:gnu:wget:1.5.3:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:wget:1.6:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:wget:1.7:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:wget:1.7.1:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:wget:1.8:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:wget:1.8.1:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:wget:1.8.2:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:wget:1.9:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:wget:1.9.1:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
10- www.securityfocus.com/bid/10361nvdExploit
- marc.infonvd
- marc.infonvd
- marc.infonvd
- secunia.com/advisories/17399nvd
- www.mandriva.com/security/advisoriesnvd
- www.redhat.com/support/errata/RHSA-2005-771.htmlnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/16167nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9830nvd
- usn.ubuntu.com/145-1/nvd
News mentions
0No linked articles in our index yet.