CVE-2014-4877 in GNU wget
Summary
Absolute path traversal vulnerability in GNU Wget before 1.16, when recursion is enabled, allows remote FTP servers to write to arbitrary files, and consequently execute arbitrary code, via a LIST response that references the same filename within two entries, one of which indicates that the filename is for a symlink.
Reservation
07/10/2014
Disclosure
10/29/2014
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 68072 | GNU wget FTP path traversal | 22 | High | Official fix | CVE-2014-4877 |