CVE-2002-1344: Medium severity gnu wget vulnerability
Directory traversal vulnerability in wget before 1.8.2-4 allows a remote FTP server to create or overwrite files as the wget user via filenames containing (1) /absolute/path or (2) .. (dot dot) sequences.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1344?
CVE-2002-1344 is considered a moderate severity vulnerability due to its potential for file creation or overwriting on the affected systems.
How do I fix CVE-2002-1344?
To fix CVE-2002-1344, upgrade wget to a version that is not vulnerable, specifically versions after 1.8.2-4.
Who is affected by CVE-2002-1344?
CVE-2002-1344 affects users of GNU Wget versions prior to 1.8.2-4 and certain systems using vulnerable configurations.
What is a directory traversal vulnerability in the context of CVE-2002-1344?
In the context of CVE-2002-1344, a directory traversal vulnerability allows an attacker to manipulate file paths to access or modify files outside of the intended directories.
Can CVE-2002-1344 be exploited remotely?
Yes, CVE-2002-1344 can be exploited remotely by a malicious FTP server that instructs wget to download and overwrite files.