How severe is CVE-2004-1488?

CVE-2004-1488 has a CVSS 2.0 base score of 5.0, rated medium severity.

Is CVE-2004-1488 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 12% (96th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2004-1488?

CVE-2004-1488 primarily affects Gnu Wget. In total, 5 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2004-1488?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2004-1488 published?

CVE-2004-1488 was published on 2005-04-27 and last updated on 2026-06-16.

CVE-2004-1488

CVE-2004-1488 is a medium-severity vulnerability in Gnu Wget with a CVSS 2.0 base score of 5.0. Its EPSS exploit-prediction score of 12% places it in the 96th percentile, indicating an elevated likelihood of exploitation.

Key facts

Severity: Medium (CVSS 2.0 base score 5.0)
EPSS exploit prediction: 12% (96th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Gnu Wget
Published: 2005-04-27
Last modified: 2026-06-16

Description

wget 1.8.x and 1.9.x does not filter or quote control characters when displaying HTTP responses to the terminal, which may allow remote malicious web servers to inject terminal escape sequences and execute arbitrary code.

Frequently asked questions

What is CVE-2004-1488?: wget 1.8.x and 1.9.x does not filter or quote control characters when displaying HTTP responses to the terminal, which may allow remote malicious web servers to inject terminal escape sequences and execute arbitrary code.
How severe is CVE-2004-1488?: CVE-2004-1488 has a CVSS 2.0 base score of 5.0, rated medium severity.
Is CVE-2004-1488 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 12% (96th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2004-1488?: CVE-2004-1488 primarily affects Gnu Wget. In total, 5 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2004-1488?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2004-1488 published?: CVE-2004-1488 was published on 2005-04-27 and last updated on 2026-06-16.

References

Affected products (5)

cpe:2.3:a:gnu:wget:1.8:*:*:*:*:*:*:*
cpe:2.3:a:gnu:wget:1.8.1:*:*:*:*:*:*:*
cpe:2.3:a:gnu:wget:1.8.2:*:*:*:*:*:*:*
cpe:2.3:a:gnu:wget:1.9:*:*:*:*:*:*:*
cpe:2.3:a:gnu:wget:1.9.1:*:*:*:*:*:*:*

More vulnerabilities in Gnu Wget

CVE-2019-5953 — Critical (CVSS 9.8): Buffer overflow in GNU Wget 1.20.1 and earlier allows remote attackers to cause a denial-of-service (DoS) or may…
CVE-2014-4877 — Critical (CVSS 9.3): Absolute path traversal vulnerability in GNU Wget before 1.16, when recursion is enabled, allows remote FTP servers to…
CVE-2024-38428 — Critical (CVSS 9.1): url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be…
CVE-2017-13090 — High (CVSS 8.8): The retr.c:fd_read_body() function is called when processing OK responses. When the response is sent chunked in wget…
CVE-2017-13089 — High (CVSS 8.8): The http.c:skip_short_body() function is called in some circumstances, such as when processing redirects. When the…
CVE-2016-4971 — High (CVSS 8.8): GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted…

All CVEs affecting Gnu Wget →