EDB-24123

functional

WGet 1.x - Insecure File Creation Race Condition

view exploit source exploit_dbverifiedtype localauthor Hugo Vazquezpublished 2004-05-17catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2004-2014USlow2.6Exploit
Wget 1.9 and 1.9.1 allows local users to overwrite arbitrary files via a symlink attack on the name of the file being downloaded.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan