CVE Database
/

CVE-2002-1344

Back to search

CVE-2002-1344

Published: Dec 11, 2002

Modified: Aug 8, 2024

PUBLISHED

Description

Directory traversal vulnerability in wget before 1.8.2-4 allows a remote FTP server to create or overwrite files as the wget user via filenames containing (1) /absolute/path or (2) .. (dot dot) sequences.

VendorProductVersions

n/a

n/a

affected
n/a

References

CLSA-2002:552
vendor-advisory
x_refsource_CONECTIVA
DSA-209
vendor-advisory
x_refsource_DEBIAN
20021219 TSLSA-2002-0089 - wget
mailing-list
x_refsource_BUGTRAQ
N-022
third-party-advisory
government-resource
x_refsource_CIAC
6360
vdb-entry
x_refsource_BID
RHSA-2002:256
vendor-advisory
x_refsource_REDHAT
MDKSA-2002:086
vendor-advisory
x_refsource_MANDRAKE
CLA-2002:552
vendor-advisory
x_refsource_CONECTIVA
RHSA-2002:229
vendor-advisory
x_refsource_REDHAT
CSSA-2003.003.0
vendor-advisory
x_refsource_CALDERA
6352
vdb-entry
x_refsource_BID
VU#210148
third-party-advisory
x_refsource_CERT-VN
wget-ftp-filename-traversal(10820)
vdb-entry
x_refsource_XF
OpenPKG-SA-2003.007
vendor-advisory
x_refsource_OPENPKG

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now