Vulnerability Details CVE-2004-1488
wget 1.8.x and 1.9.x does not filter or quote control characters when displaying HTTP responses to the terminal, which may allow remote malicious web servers to inject terminal escape sequences and execute arbitrary code.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.133
EPSS Ranking 93.8%
CVSS Severity
CVSS v2 Score 5.0
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=261755
- http://marc.info/?l=bugtraq&m=110269474112384&w=2
- http://secunia.com/advisories/20960
- http://securitytracker.com/id?1012472
- http://www.novell.com/linux/security/advisories/2006_16_sr.html
- http://www.redhat.com/support/errata/RHSA-2005-771.html
- http://www.securityfocus.com/bid/11871
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18421
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9750
- https://usn.ubuntu.com/145-1/
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=261755
- http://marc.info/?l=bugtraq&m=110269474112384&w=2
- http://secunia.com/advisories/20960
- http://securitytracker.com/id?1012472
- http://www.novell.com/linux/security/advisories/2006_16_sr.html
- http://www.redhat.com/support/errata/RHSA-2005-771.html
- http://www.securityfocus.com/bid/11871
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18421
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9750
- https://usn.ubuntu.com/145-1/