CVE-2004-1488

GNU wget 1.8.x-1.9.x - Remote Code Execution via Terminal Escape Sequence Injection

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2004-1488. PoCs published by Jan Minar.

AI-analyzed exploit summary This exploit leverages a directory traversal vulnerability in GNU wget (CVE-2004-1488) to overwrite arbitrary files on the target system. It uses a malicious HTTP server to serve a crafted response that tricks wget into writing a payload to a specified file, potentially leading to remote code execution.

Description

wget 1.8.x and 1.9.x does not filter or quote control characters when displaying HTTP responses to the terminal, which may allow remote malicious web servers to inject terminal escape sequences and execute arbitrary code.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Jan Minar · perlremotelinux

https://www.exploit-db.com/exploits/24813

View Code ZIP pw:eip

This exploit leverages a directory traversal vulnerability in GNU wget (CVE-2004-1488) to overwrite arbitrary files on the target system. It uses a malicious HTTP server to serve a crafted response that tricks wget into writing a payload to a specified file, potentially leading to remote code execution.

Classification

Working Poc 90%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: GNU wget (versions prior to fix for CVE-2004-1488)

No auth needed

Prerequisites: Victim must connect to a malicious server using wget · Attacker must control a server to serve malicious HTTP responses

MITRE ATT&CK