CVE-2004-1487 — security flaw

Back Back to CVE browser

MEDIUM

security flaw

Published Feb 15, 2005

5.0

MEDIUM

CVSS 2.0

EPSS 1.66%

Description

wget 1.8.x and 1.9.x allows a remote malicious web server to overwrite certain files via a redirection URL containing a ".." that resolves to the IP address of the malicious server, which bypasses wget's filtering for ".." sequences.

Affected products

Red Hat Enterprise Linux 3

wget-0:1.10.1-1.30E.1

Fixed · RHSA-2005:771
Red Hat Enterprise Linux 4

wget-0:1.10.1-2.4E.1

Fixed · RHSA-2005:771

Product	Package	State	Advisory
Red Hat Enterprise Linux 3	wget-0:1.10.1-1.30E.1	Fixed	RHSA-2005:771
Red Hat Enterprise Linux 4	wget-0:1.10.1-2.4E.1	Fixed	RHSA-2005:771

Remediation

No remediation recorded yet.

Metrics

1.66% 0.01657

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.01657

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (13 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	1.66% (0.01657)	75.74th	v5 (v2026.06.15)
Jun 15, 2026	1.66% (0.01657)	73.47th	v5 (v2026.06.15)
Mar 30, 2025	0.69% (0.00690)	69.45th	v4 (v2025.03.14)
Mar 29, 2025	2.10% (0.02101)	73.43th	v4 (v2025.03.14)
Mar 17, 2025	0.69% (0.00690)	70.10th	v4 (v2025.03.14)
Dec 12, 2024	0.20% (0.00203)	59.20th	v3 (v2023.03.01)
Jan 23, 2024	0.20% (0.00203)	58.26th	v3 (v2023.03.01)
Jun 7, 2023	0.29% (0.00285)	64.11th	v3 (v2023.03.01)
Mar 7, 2023	0.42% (0.00421)	70.19th	v3 (v2023.03.01)
Mar 6, 2023	1.18% (0.01183)	61.76th	v2 (v2022.01.01)
Oct 19, 2022	1.18% (0.01183)	60.79th	v2 (v2022.01.01)
Apr 1, 2022	1.18% (0.01183)	58.77th	v2 (v2022.01.01)
Feb 4, 2022	1.18% (0.01183)	35.15th	v2 (v2022.01.01)

Weaknesses (0)

No CWE recorded.

References (12)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=261755
x_refsource_MISCExploitVendor Advisory
http://marc.info/?l=bugtraq&m=110269474112384&w=2
mailing-listx_refsource_BUGTRAQ
http://securitytracker.com/id?1012472
vdb-entryx_refsource_SECTRACK
http://www.redhat.com/support/errata/RHSA-2005-771.html
vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/11871
vdb-entryx_refsource_BIDExploitVendor Advisory
https://access.redhat.com/security/cve/CVE-2004-1487
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1617413
Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/18420
vdb-entryx_refsource_XF
https://nvd.nist.gov/vuln/detail/CVE-2004-1487
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11682
vdb-entrysignaturex_refsource_OVAL
https://usn.ubuntu.com/145-1/
vendor-advisoryx_refsource_UBUNTU
https://www.cve.org/CVERecord?id=CVE-2004-1487

Link	Providers	Tags
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=261755		x_refsource_MISCExploitVendor Advisory
http://marc.info/?l=bugtraq&m=110269474112384&w=2		mailing-listx_refsource_BUGTRAQ
http://securitytracker.com/id?1012472		vdb-entryx_refsource_SECTRACK
http://www.redhat.com/support/errata/RHSA-2005-771.html		vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/11871		vdb-entryx_refsource_BIDExploitVendor Advisory
https://access.redhat.com/security/cve/CVE-2004-1487		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1617413		Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/18420		vdb-entryx_refsource_XF
https://nvd.nist.gov/vuln/detail/CVE-2004-1487
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11682		vdb-entrysignaturex_refsource_OVAL
https://usn.ubuntu.com/145-1/		vendor-advisoryx_refsource_UBUNTU
https://www.cve.org/CVERecord?id=CVE-2004-1487