Total vulnerabilities in the database
wget 1.8.x and 1.9.x allows a remote malicious web server to overwrite certain files via a redirection URL containing a ".." that resolves to the IP address of the malicious server, which bypasses wget's filtering for ".." sequences.
| Software | From | Fixed in |
|---|---|---|
| gnu / wget | 1.8.2 | 1.8.2.x |
| gnu / wget | 1.9 | 1.9.x |
| gnu / wget | 1.8 | 1.8.x |
| gnu / wget | 1.8.1 | 1.8.1.x |
| gnu / wget | 1.9.1 | 1.9.1.x |