CVE-2016-4971
wget: Lack of filename checking allows arbitrary file upload via FTP redirect
Severity
ModerateRed Hat Product Security
CVSS 3.0
Review impact separately from score.
Published · June 9, 2016
Updated · November 21, 2025
Description
It was found that wget used a file name provided by the server for the downloaded file when following a HTTP redirect to a FTP server resource. This could cause wget to create a file with a different name than expected, possibly allowing the server to execute arbitrary code on the client.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Use wget with "-O" option to explicitly specify the output filename.
CVSS / CWE
CVSS 3.0 · 7CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 · 6.8AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-73 · External Control of File Name or Path