CVE-2004-1487

Synopsis wget security update Type/Severity Security Advisory: Low Topic Updated wget package that fixes several security issues is now availableThis update has been rated as having low security impact by the Red HatSecurity Response Team Description GNU Wget is a file retrieval utility t ...

Jan Minar discovered a path traversal vulnerability in wget If the name “” was a valid host name (which can be achieved with a malicious or poisoned domain name server), it was possible to trick wget into creating downloaded files into arbitrary locations with arbitrary names For example, wget could silently overwrite the users ~/bashrc an ...