CVE-2004-1488

28Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 12%

from disclosure to weapon0 days

Published on NVDFeb 15

1st PoCDec 10

exploitation probability

12%top 4% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

wget 1.8.x and 1.9.x does not filter or quote control characters when displaying HTTP responses to the terminal, which may allow remote malicious web servers to inject terminal escape sequences and execute arbitrary code.

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/24813

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=261755 http://marc.info/?l=bugtraq&m=110269474112384&w=2 http://secunia.com/advisories/20960 http://securitytracker.com/id?1012472 https://exchange.xforce.ibmcloud.com/vulnerabilities/18421 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9750 https://usn.ubuntu.com/145-1/http://www.novell.com/linux/security/advisories/2006_16_sr.html http://www.redhat.com/support/errata/RHSA-2005-771.html http://www.securityfocus.com/bid/11871