CVE-1999-0402

Medium

Published: 02/01/1999(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.45%

70th percentile - higher than 70% of all known CVEs

Version 1.5.3 of wget follows symlinks, leading to permission changes on the target file instead of the symlink itself.

This may result in unauthorized changes to file permissions, posing a risk to system integrity.

It is recommended to update wget to a newer version that does not have this vulnerability.

Original NVD description (English source)

wget 1.5.3 follows symlinks to change permissions of the target file instead of the symlink itself.