Debian DSA-1904-1 : wget - insufficient input validation

Daniel Stenberg discovered that wget, a network utility to retrieve files from the Web using HTTPS and FTP, is vulnerable to the 'Null Prefix Attacks Against SSL/TLS Certificates' published at the Blackhat conference some time ago. This allows an attacker to perform undetected man-in-the-middle...

[SECURITY] [DSA-1990-2] New trac-git package fixes regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1990-2 [email protected] http://www.debian.org/security/ Stefan Fritsch February 04, 2010 http://www.debian.org/security/faq -...

TLS Renegotiation Vulnerability PoC Exploit

No description provided by source. !/usr/bin/env python RedTeam Pentesting GmbH [email protected] http://www.redteam-pentesting.de PoC exploit for the TLS renegotiation vulnerability CVE-2009-3555 License ------- CC-BY-SA http://creativecommons.org/licenses/by-sa/3.0/ Timeline -------...

TLS Renegotiation Exploit

!/usr/bin/env python RedTeam Pentesting GmbH [email protected] http://www.redteam-pentesting.de PoC exploit for the TLS renegotiation vulnerability CVE-2009-3555 License ------- CC-BY-SA http://creativecommons.org/licenses/by-sa/3.0/ Timeline -------- 2009-12-21 initial public release...

Fedora Core 10 FEDORA-2009-11739 (wget)

The remote host is missing an update to wget announced via advisory FEDORA-2009-11739. OpenVAS Vulnerability Test $Id: fcore200911739.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-11739 wget Authors: Thomas Reinke Copyright: Copyright c 2009 E-Sof...

Fedora Core 10 FEDORA-2009-11739 (wget)

The remote host is missing an update to wget announced via advisory FEDORA-2009-11739. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 12 FEDORA-2009-11836 (wget)

The remote host is missing an update to wget announced via advisory FEDORA-2009-11836. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Mandriva Security Advisory MDVSA-2009:206-1 (wget)

The remote host is missing an update to wget announced via advisory MDVSA-2009:206-1. OpenVAS Vulnerability Test $Id: mdksa20092061.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:206-1 wget Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Fedora Core 11 FEDORA-2009-11740 (wget)

The remote host is missing an update to wget announced via advisory FEDORA-2009-11740. OpenVAS Vulnerability Test $Id: fcore200911740.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-11740 wget Authors: Thomas Reinke Copyright: Copyright c 2009 E-Sof...

Fedora Core 12 FEDORA-2009-11836 (wget)

The remote host is missing an update to wget announced via advisory FEDORA-2009-11836. OpenVAS Vulnerability Test $Id: fcore200911836.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-11836 wget Authors: Thomas Reinke Copyright: Copyright c 2009 E-Sof...

Fedora Core 11 FEDORA-2009-11740 (wget)

The remote host is missing an update to wget announced via advisory FEDORA-2009-11740. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Mandriva Security Advisory MDVSA-2009:206-1 (wget)

The remote host is missing an update to wget announced via advisory MDVSA-2009:206-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

[SECURITY] Fedora 11 Update: wget-1.12-2.fc11

GNU Wget is a file retrieval utility which can use either the HTTP or FTP protocols. Wget features include the ability to work in the background while you are logged out, recursive retrieval of directories, file name wildcard matching, remote file timestamp storage and comparison, use of Rest wit...

[SECURITY] Fedora 12 Update: wget-1.12-2.fc12

GNU Wget is a file retrieval utility which can use either the HTTP or FTP protocols. Wget features include the ability to work in the background while you are logged out, recursive retrieval of directories, file name wildcard matching, remote file timestamp storage and comparison, use of Rest wit...

Fedora 10 : wget-1.12-2.fc10 (2009-11739)

Wed Nov 18 2009 Karsten Hopp 1.12-2 - don't provide /usr/share/info/dir - Tue Nov 17 2009 Karsten Hopp 1.12-1 - update to wget-1.12 - fixes CVE-2009-3490 wget: incorrect verification of SSL certificate with NUL in name - Fri Aug 21 2009 Tomas Mraz - 1.11.4-5 - rebuilt with new openssl - Mon Jul...

Fedora 12 : wget-1.12-2.fc12 (2009-11836)

Wed Nov 18 2009 Karsten Hopp 1.12-2 - don't provide /usr/share/info/dir - Tue Nov 17 2009 Karsten Hopp 1.12-1 - update to wget-1.12 - fixes CVE-2009-3490 wget: incorrect verification of SSL certificate with NUL in name Note that Tenable Network Security has extracted the preceding description...

Fedora 11 : wget-1.12-2.fc11 (2009-11740)

Wed Nov 18 2009 Karsten Hopp 1.12-2 - don't provide /usr/share/info/dir - Tue Nov 17 2009 Karsten Hopp 1.12-1 - update to wget-1.12 - fixes CVE-2009-3490 wget: incorrect verification of SSL certificate with NUL in name - Fri Aug 21 2009 Tomas Mraz - 1.11.4-5 - rebuilt with new openssl - Mon Jul...

Solaris 10 (x86) : 125216-07 (deprecated)

SunOS 5.10x86: wget patch. Date this patch was last updated by Sun : Sep/15/16 This plugin has been deprecated and either replaced with individual 125216 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2018/03/1...

Solaris 10 (sparc) : 125215-07 (deprecated)

SunOS 5.10: wget patch. Date this patch was last updated by Sun : Sep/15/16 This plugin has been deprecated and either replaced with individual 125215 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2018/03/12...

RedHat Security Advisory RHSA-2009:1549

The remote host is missing updates announced in advisory RHSA-2009:1549. GNU Wget is a file retrieval utility that can use HTTP, HTTPS, and FTP. Daniel Stenberg reported that Wget is affected by the previously published null prefix attack, caused by incorrect handling of NULL characters in X.509...