https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 19:43:03 +0000 https://vulnerability.circl.lu/vuln/cve-2014-4877 <p>Absolute path traversal vulnerability in GNU Wget before 1.16, when recursion is enabled, allows remote FTP servers to write to arbitrary files, and consequently execute arbitrary code, via a LIST response that references the same filename within two entries, one of which indicates that the filename is for a symlink.</p> <p>Absolute path traversal vulnerability in GNU Wget before 1.16, when recursion is enabled, allows remote FTP servers to write to arbitrary files, and consequently execute arbitrary code, via a LIST response that references the same filename within two entries, one of which indicates that the filename is for a symlink.</p> https://vulnerability.circl.lu/vuln/cve-2014-4877 https://vulnerability.circl.lu/vuln/usn-2393-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: wget</p> <p>HD Moore discovered that Wget contained a path traversal vulnerability when downloading symlinks using FTP. A malicious remote FTP server or a man in the middle could use this issue to cause Wget to overwrite arbitrary files, possibly leading to arbitrary code execution.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: wget</p> <p>HD Moore discovered that Wget contained a path traversal vulnerability when downloading symlinks using FTP. A malicious remote FTP server or a man in the middle could use this issue to cause Wget to overwrite arbitrary files, possibly leading to arbitrary code execution.</p> https://vulnerability.circl.lu/vuln/usn-2393-1