Fedora Core 12 FEDORA-2009-11836 (wget)

The remote host is missing an update to wget announced via advisory FEDORA-2009-11836. OpenVAS Vulnerability Test $Id: fcore200911836.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-11836 wget Authors: Thomas Reinke Copyright: Copyright c 2009 E-Sof...

Fedora Core 11 FEDORA-2009-11740 (wget)

The remote host is missing an update to wget announced via advisory FEDORA-2009-11740. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora 11 : wget-1.12-2.fc11 (2009-11740)

Wed Nov 18 2009 Karsten Hopp 1.12-2 - don't provide /usr/share/info/dir - Tue Nov 17 2009 Karsten Hopp 1.12-1 - update to wget-1.12 - fixes CVE-2009-3490 wget: incorrect verification of SSL certificate with NUL in name - Fri Aug 21 2009 Tomas Mraz - 1.11.4-5 - rebuilt with new openssl - Mon Jul...

Fedora 10 : wget-1.12-2.fc10 (2009-11739)

Wed Nov 18 2009 Karsten Hopp 1.12-2 - don't provide /usr/share/info/dir - Tue Nov 17 2009 Karsten Hopp 1.12-1 - update to wget-1.12 - fixes CVE-2009-3490 wget: incorrect verification of SSL certificate with NUL in name - Fri Aug 21 2009 Tomas Mraz - 1.11.4-5 - rebuilt with new openssl - Mon Jul...

Solaris 10 (x86) : 125216-07 (deprecated)

SunOS 5.10x86: wget patch. Date this patch was last updated by Sun : Sep/15/16 This plugin has been deprecated and either replaced with individual 125216 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2018/03/1...

CentOS Security Advisory CESA-2009:1549 (wget)

The remote host is missing updates to wget announced in advisory CESA-2009:1549. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

RedHat Security Advisory RHSA-2009:1549

The remote host is missing updates announced in advisory RHSA-2009:1549. GNU Wget is a file retrieval utility that can use HTTP, HTTPS, and FTP. Daniel Stenberg reported that Wget is affected by the previously published null prefix attack, caused by incorrect handling of NULL characters in X.509...

Wget CA SSL畸形证书验证漏洞

BUGTRAQ ID: 36205 CVECAN ID: CVE-2009-3490 Wget是可使用HTTP、HTTPS和FTP协议的文件检索工具。 Wget没有正确地处理X.509证书主题通用名称（CN）字段域名中的空字符（\0），在处理包含有空字符的证书字段时错误地将空字符处理为截止字符，因此只会验证空字符前的部分。例如，对于类似于以下的名称： example.com\0.haxx.se 证书是发布给haxx.se的，但Wget错误的验证给example.com，这有助于攻击者通过中间人攻击执行网络钓鱼等欺骗。 Micah Cowan Wget 1.12 厂商补丁： RedHat...

RHEL 4 / 5 : wget (RHSA-2009:1549)

The remote Redhat Enterprise Linux 4 / 5 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2009:1549 advisory. - wget: incorrect verification of SSL certificate with NUL in name CVE-2009-3490 Note that Nessus has not tested for this issue but has instead...

Gentoo Security Advisory GLSA 200910-01 (wget)

The remote host is missing updates announced in advisory GLSA 200910-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

[USN-842-1] Wget vulnerability

=========================================================== Ubuntu Security Notice USN-842-1 October 06, 2009 wget vulnerability CVE-2009-3490 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 8.04 LTS Ubuntu...

CVE-2009-3490

GNU Wget before 1.12 does not properly handle a '\0' character in a domain name in the Common Name field of an X.509 certificate, which allows man-in-the-middle remote attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issu...

CVE-2009-3490

GNU Wget before 1.12 does not properly handle a '\0' character in a domain name in the Common Name field of an X.509 certificate, which allows man-in-the-middle remote attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issu...

CVE-2009-3490

GNU Wget before 1.12 does not properly handle a '\0' character in a domain name in the Common Name field of an X.509 certificate, which allows man-in-the-middle remote attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issu...

CVE-2009-3490

CVE-2009-3490 : GNU Wget

Mandriva Linux Security Advisory : wget (MDVSA-2009:206-1)

A vulnerability has been found and corrected in wget : GNU Wget before 1.12 does not properly handle a '' NUL character in a domain name in the Common Name field of an X.509 certificate, which allows man-in-the-middle remote attackers to spoof arbitrary SSL servers via a crafted certificate issue...

CVE-2008-3490

CVE-2008-3490: SQL injection in E-topbiz Online Dating 3 (v1.0) in members/mail.php, via the mail_id parameter in a veiw action. All evidence indicates remote authenticated users can cause arbitrary SQL execution due to improper input handling. Public exploit references exist (e.g., Exploit DB), ...

CVE-2008-3490

creationtimestamp| type| source ---|---|--- 2008-08-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6184...

Input validation

Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via crafted macros, aka "Macro Validation Vulnerability," a different vulnerability than CVE-2007-3490...

CVE-2007-3490

Microsoft Excel 2003 SP2 contains a memory corruption vulnerability in the way it parses hostile XLS sheet names (as demonstrated by 2670.xls). A remote attacker could exploit this by persuading a user to open a crafted XLS file, potentially allowing arbitrary code execution in the security conte...