Skip to content

CVE-2004-2014 on CTRL-OS 26.05

Aliases: CVE-2004-2014

Packages: wget

Status: Blocked: No known fix

Advisory Information

Wget 1.9 and 1.9.1 allows local users to overwrite arbitrary files via a symlink attack on the name of the file being downloaded.

Updates

2026-07-13 17:58 CEST

Metadata changes:

  • Status for package wget: “Blocked: No known fix”

2026-07-13 17:50 CEST

Metadata changes:

  • Status for package wget: “New”

(Amended on: 2026-07-13 17:58 CEST)