CVE-2004-2014: GNU Wget

Low severity, CVSS 2.6. EPSS: 1% chance of exploitation in the next 30 days.

Wget 1.9 and 1.9.1 allows local users to overwrite arbitrary files via a symlink attack on the name of the file being downloaded.

Affected products

• GNU Wget: version 1.5.3 only; version 1.6 only; version 1.7 only; version 1.7.1 only; version 1.8 only; version 1.8.1 only; …

Published 2004-12-31. Last modified 2026-06-16.