{"id":"CVE-2016-4971","url":"https://www.cyber-defence.io/tools/cve/CVE-2016-4971","generatedAt":"2026-11-05T05:27:49.974Z","title":"GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource.","description":"GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource.","published":"2016-06-30T17:59:08.000Z","lastModified":"2026-06-17T00:48:32.000Z","status":"Modified","sourceIdentifier":"secalert@redhat.com","cvss":{"version":"3.1","score":8.8,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},"cwe":[],"affected":["gnu/wget","canonical/ubuntu linux","oracle/solaris","paloaltonetworks/pan-os"],"epss":{"score":0.4606,"percentile":0.98813,"date":"2026-11-04","history":[]},"kev":{"listed":false},"exploits":{"count":2,"verified":true,"firstPublished":"2016-07-06","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":49815,"kind":"exploit","title":"GNU Wget < 1.18 - Arbitrary File Upload (2)","url":"https://www.exploit-db.com/exploits/49815","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/49815.py","file":"exploits/linux/remote/49815.py","published":"2021-04-30","added":"2021-04-30","updated":"2021-10-29","author":"liewehacksie","type":"remote","platform":"linux","port":null,"verified":false,"codes":["CVE-2016-4971"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null},{"edbId":40064,"kind":"exploit","title":"GNU Wget < 1.18 - Arbitrary File Upload / Remote Code Execution","url":"https://www.exploit-db.com/exploits/40064","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/40064.txt","file":"exploits/linux/remote/40064.txt","published":"2016-07-06","added":"2016-07-06","updated":"2016-07-06","author":"Dawid Golunski","type":"remote","platform":"linux","port":null,"verified":true,"codes":["CVE-2016-4971"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"http://legalhackers.com/advisories/Wget-Arbitrary-File-Upload-Vulnerability-Exploit.txt"}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 46.1%, higher than 99% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"http://git.savannah.gnu.org/cgit/wget.git/commit/?id=e996e322ffd42aaa051602da182d03178d0f13e1","tags":["Patch","Vendor Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.gnu.org/archive/html/info-gnu/2016-06/msg00004.html","tags":["Mailing List","Patch","Vendor Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-08/msg00043.html","tags":["Broken Link"],"source":"secalert@redhat.com"},{"url":"http://packetstormsecurity.com/files/162395/GNU-wget-Arbitrary-File-Upload-Code-Execution.html","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2587.html","tags":["Broken Link"],"source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/91530","tags":["Third Party Advisory","VDB Entry"],"source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1036133","tags":["Third Party Advisory","VDB Entry"],"source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-3012-1","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1343666","tags":["Exploit","Issue Tracking","Patch","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201610-11","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"https://security.paloaltonetworks.com/CVE-2016-4971","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"https://www.exploit-db.com/exploits/40064/","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"secalert@redhat.com"},{"url":"http://git.savannah.gnu.org/cgit/wget.git/commit/?id=e996e322ffd42aaa051602da182d03178d0f13e1","tags":["Patch","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.gnu.org/archive/html/info-gnu/2016-06/msg00004.html","tags":["Mailing List","Patch","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-08/msg00043.html","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/files/162395/GNU-wget-Arbitrary-File-Upload-Code-Execution.html","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2587.html","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91530","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036133","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3012-1","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1343666","tags":["Exploit","Issue Tracking","Patch","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201610-11","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.paloaltonetworks.com/CVE-2016-4971","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/40064/","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2016-4971","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}