Gnu: Security Vulnerabilities
wget 1.5.3 follows symlinks to change permissions of the target file instead of the symlink itself.
CVSS Score
5.0
EPSS Score
0.015
Published
1999-01-02
FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.
CVSS Score
7.5
EPSS Score
0.02
Published
1997-12-10
Land IP denial of service.
CVSS Score
5.0
EPSS Score
0.957
Published
1997-12-01
Denial of service of inetd on Linux through SYN and RST packets.
CVSS Score
5.0
EPSS Score
0.026
Published
1997-11-01
The Perl fingerd program allows arbitrary command execution from remote users.
CVSS Score
7.5
EPSS Score
0.04
Published
1997-07-01
Race condition in signal handling routine in ftpd, allowing read/write arbitrary files.
CVSS Score
5.4
EPSS Score
0.008
Published
1997-05-29
A version of finger is running that exposes valid user information to any entity on the network.
EPSS Score
0.674
Published
1997-03-01
Buffer overflow in NLS (Natural Language Service).
CVSS Score
7.5
EPSS Score
0.091
Published
1997-02-13
(1) bash before 1.14.7, and (2) tcsh 6.05 allow local users to gain privileges via directory names that contain shell metacharacters (` back-tick), which can cause the commands enclosed in the directory name to be executed when the shell expands filenames using the \w option in the PS1 variable.
CVSS Score
4.6
EPSS Score
0.004
Published
1996-09-13
Page 119