CVE-2004-1488 Affecting wget package, versions <1.9.1-11
Threat Intelligence
EPSS
1.94% (90th
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-DEBIANUNSTABLE-WGET-300533
- published 27 Apr 2005
- disclosed 27 Apr 2005
Introduced: 27 Apr 2005
CVE-2004-1488 Open this link in a new tabHow to fix?
Upgrade Debian:unstable wget to version 1.9.1-11 or higher.
NVD Description
Note: Versions mentioned in the description apply only to the upstream wget package and not the wget package as distributed by Debian.
See How to fix? for Debian:unstable relevant fixed versions and status.
wget 1.8.x and 1.9.x does not filter or quote control characters when displaying HTTP responses to the terminal, which may allow remote malicious web servers to inject terminal escape sequences and execute arbitrary code.
References
- https://security-tracker.debian.org/tracker/CVE-2004-1488
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=261755
- http://marc.info/?l=bugtraq&m=110269474112384&w=2
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9750
- http://securitytracker.com/id?1012472
- http://secunia.com/advisories/20960
- http://www.securityfocus.com/bid/11871
- http://www.novell.com/linux/security/advisories/2006_16_sr.html
- http://www.ubuntulinux.org/support/documentation/usn/usn-145-1
- https://usn.ubuntu.com/145-1/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18421
- http://www.redhat.com/support/errata/RHSA-2005-771.html
CVSS Scores
version 3.1