CVE-2004-1488 | BDVDB-2026-8204 Detail
Description#
wget 1.8.x and 1.9.x does not filter or quote control characters when displaying HTTP responses to the terminal, which may allow remote malicious web servers to inject terminal escape sequences and execute arbitrary code.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.redhat.com/support/errata/RHSA-2005-771.html
- http://www.securityfocus.com/bid/11871
- http://marc.info/?l=bugtraq&m=110269474112384&w=2
- https://usn.ubuntu.com/145-1/
- http://www.novell.com/linux/security/advisories/2006_16_sr.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18421
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=261755
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9750
- http://secunia.com/advisories/20960
- http://securitytracker.com/id?1012472
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.