Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2009-3490HistorySep 30, 2009 - 3:30 p.m.
CVE-2009-3490
2009-09-3015:30:00
Debian Security Bug Tracker
security-tracker.debian.org
10
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.004 Low
EPSS
Percentile
73.7%
GNU Wget before 1.12 does not properly handle a ‘\0’ character in a domain name in the Common Name field of an X.509 certificate, which allows man-in-the-middle remote attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | wget | < 1.12-1 | wget_1.12-1_all.deb |
| Debian | 11 | all | wget | < 1.12-1 | wget_1.12-1_all.deb |
| Debian | 10 | all | wget | < 1.12-1 | wget_1.12-1_all.deb |
| Debian | 999 | all | wget | < 1.12-1 | wget_1.12-1_all.deb |
| Debian | 13 | all | wget | < 1.12-1 | wget_1.12-1_all.deb |
Related
openvas
openvas
Mandriva Security Advisory MDVSA-2009:206-1 (wget)
2009-12-10 00:00:00
Mandriva Security Advisory MDVSA-2009:206-1 (wget)
2009-12-10 00:00:00
Fedora Core 10 FEDORA-2009-11739 (wget)
2009-12-10 00:00:00
cve
cve
prion
prion
Design/Logic Flaw
2009-09-30 15:30:00
Code injection
2009-07-30 19:30:00
Design/Logic Flaw
2009-10-23 19:30:00
ubuntucve
ubuntucve
nessus
nessus
Mandriva Linux Security Advisory : wget (MDVSA-2009:206-1)
2009-08-20 00:00:00
Solaris 10 (x86) : 125216-07 (deprecated)
2009-12-02 00:00:00
Solaris 10 (sparc) : 125215-07 (deprecated)
2009-12-02 00:00:00
fedora
fedora
[SECURITY] Fedora 10 Update: wget-1.12-2.fc10
2009-12-03 05:12:11
[SECURITY] Fedora 11 Update: wget-1.12-2.fc11
2009-12-03 04:56:35
[SECURITY] Fedora 12 Update: wget-1.12-2.fc12
2009-12-03 04:56:18
securityvulns
securityvulns
wget certificate spoofing
2009-10-07 00:00:00
[USN-842-1] Wget vulnerability
2009-10-07 00:00:00
Mozilla Foundation Security Advisory 2009-42
2009-08-07 00:00:00
centos
centos
wget security update
2009-11-03 21:48:02
oraclelinux
oraclelinux
wget security update
2009-11-03 00:00:00
gentoo
gentoo
Wget: Certificate validation error
2009-10-20 00:00:00
redhat
redhat
(RHSA-2009:1549) Moderate: wget security update
2009-11-03 00:00:00
debian
debian
[SECURITY] [DSA 1904-1] New wget packages fix SSL certificate verification weakness
2009-10-09 11:31:45
[Backports-security-announce] Security Update for proftpd-dfsg
2010-01-26 21:06:44
[Backports-security-announce] Security Update for proftpd-dfsg
2010-01-26 21:30:08
veracode
veracode
Spoofing Attack
2020-04-10 00:42:35
Man-in-the-Middle (MitM)
2020-04-10 00:33:40
seebug
seebug
Wget CA SSL畸形证书验证漏洞
2009-11-05 00:00:00
Mozilla Firefox NULL字符CA SSL证书验证安全绕过漏洞
2009-07-31 00:00:00
ubuntu
ubuntu
Wget vulnerability
2009-10-06 00:00:00
threatpost
threatpost
Apple Safari
2009-12-29 21:50:26
mozilla
mozilla
Compromise of SSL-protected communication — Mozilla
2009-08-01 00:00:00
exploitdb
exploitdb
debiancve
debiancve
f5
f5
SOL14909 - OpenSSL vulnerability CVE-2013-4248
2014-01-15 00:00:00
K15683 : Ruby vulnerability CVE-2013-4073
2014-10-09 00:00:00
K15638 : Python vulnerability CVE-2013-4238
2014-10-17 00:00:00
aix
aix
Vulnerability in Diffie-Hellman ciphers affects sendmail on VIOS
2010-03-29 15:54:57
talos
talos
Randombit Botan Library X509 Certificate Validation Bypass Vulnerability
2017-04-28 00:00:00
amazon
amazon
Medium: python27
2013-09-04 13:31:00
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.004 Low
EPSS
Percentile
73.7%
Related for DEBIANCVE:CVE-2009-3490