CVE Tools
Sign in

CVE-2016-4971

Published: Jun 30, 2016Updated: May 6, 2026 Sources: CVE List NVD BDUNVD-CWE-noinfo
NVD MITRE
8.8CVSSHIGH
EPSS Score
45.9%
Top 1.4%
CISA KEV
Not in KEV
Exploits
2 Known
Remediation
Patch Available

Description

GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource.

CVSS Vector Breakdown

AV:NAC:LPR:NUI:RS:UC:HI:HA:H
Exploitability
AV:NAttack Vector
Network
AC:LAttack Complexity
Low
PR:NPrivileges Required
None
UI:RUser Interaction
Required
Scope
S:UScope
Unchanged
Impact
C:HConfidentiality
High
I:HIntegrity
High
A:HAvailability
High
Open in CVSS calculator →

Weaknesses

NVD-CWE-noinfo

Affected Products

n/an/a
UbuntuCanonical Ltd.
On-premOS
Operating Systems / linux-distro
GNU WgetThe GNU Project
Mixed
Operating Systems / linux-distro
wgetgnuOSS Libraries
ubuntu linuxcanonical
On-premOS
Operating Systems / linux-distro
canonical ltd.commercialGBOperating Systemsaka canonical
the gnu projectoss-projectUSOperating Systemsaka gnu
gnuoss-projectUSOSS Librariesaka g. nu
canonicalcommercialGBOperating Systemsaka canonical ltd.
and 2 more affected products View all →

Exploitability

2 exploit sources identified

Exploit details including PoC links, Metasploit modules, and scanner templates are available after registration.

View exploit details
Official Patch Available

References

http://lists.gnu.org/archive/html/info-gnu/2016-06/msg00004.html
lists.gnu.org
https://security.gentoo.org/glsa/201610-11
security.gentoo.org
http://lists.opensuse.org/opensuse-updates/2016-08/msg00043.html
lists.opensuse.org
and 13 more references View all →

Timeline

Published
Jun 30, 2016
Last Updated
May 6, 2026

Unlock Complete Vulnerability Intelligence

Get the full picture for CVE-2016-4971 and every CVE in our database. Create a free account — no credit card required.

Create Free Account
Plain-language analysis
Impact assessment and exploitation scenario in plain English
Attack graph visualization
Interactive attack path and kill chain mapping
Exploit details & PoC links
ExploitDB, Metasploit, GitHub PoCs with direct links
Nuclei scanner templates
Ready-to-use vulnerability scanner templates
Full remediation guide
Patch instructions, workarounds, and compliance impact
Interactive AI chat
Ask questions about this vulnerability in natural language
Related vulnerabilities
Semantically similar CVEs and attack patterns
REST API & MCP access
Integrate vulnerability data into your workflows