PT-1999-1088 · Gnu · Wget

Published 1999-01-02 · Updated 2022-08-17 · CVE-1999-0402

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions wget version 1.5.3

Description The issue allows wget to follow symlinks and change permissions of the target file instead of the symlink itself.

Recommendations For version 1.5.3, consider updating to a newer version that does not follow symlinks when changing permissions, or apply a configuration change to prevent wget from following symlinks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-1999-0402

Affected Products

Wget

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-1999-0402 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0402 · Note
• https://t.me/cvenotify/34748 · Telegram Post