FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2004-1488

This CVE name corresponds to:

Entered	Topic
2004-12-14	wget -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2004-1488 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2004-1488
Phase	Assigned(20050215)

Description

wget 1.8.x and 1.9.x does not filter or quote control characters when displaying HTTP responses to the terminal, which may allow remote malicious web servers to inject terminal escape sequences and execute arbitrary code.

References

Source	Reference
BUGTRAQ	20041209 wget: Arbitrary file overwriting/appending/creating and other vulnerabilities
MISC	http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=261755
REDHAT	RHSA-2005:771
SUSE	SUSE-SR:2006:016
UBUNTU	USN-145-1
BID	11871
OVAL	oval:org.mitre.oval:def:9750
SECTRACK	1012472
SECUNIA	20960
XF	wget-terminal-overwrite(18421)