CVE-2004-1488
Fixed in a distro release EPSS 12%
wget 1.8.x and 1.9.x does not filter or quote control characters when displaying HTTP responses to the terminal, which may allow remote malicious web servers to inject terminal escape sequences and execute arbitrary code.
Products: gnu wget
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | wget | 1.9.1-11 |
| Debian 13 | wget | 1.9.1-11 |
| Debian 14 | wget | 1.9.1-11 |
| Red Hat Enterprise Linux 3 | wget | 0:1.10.1-1.30E.1 |
| Red Hat Enterprise Linux 3 | wget-debuginfo | 0:1.10.1-1.30E.1 |
| Red Hat Enterprise Linux 4 | wget | 0:1.10.1-2.4E.1 |
| Red Hat Enterprise Linux 4 | wget-debuginfo | 0:1.10.1-2.4E.1 |