CentOS Security Advisory CESA-2009:1549 (wget)

The remote host is missing updates to wget announced in advisory CESA-2009:1549. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

RedHat Security Advisory RHSA-2009:1549

The remote host is missing updates announced in advisory RHSA-2009:1549. GNU Wget is a file retrieval utility that can use HTTP, HTTPS, and FTP. Daniel Stenberg reported that Wget is affected by the previously published null prefix attack, caused by incorrect handling of NULL characters in X.509...

CentOS Security Advisory CESA-2009:1549 (wget)

The remote host is missing updates to wget announced in advisory CESA-2009:1549. CESA-2009:1549 66220 6 $Id: ovcesa20091549.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1549 wget Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Wget CA SSL畸形证书验证漏洞

BUGTRAQ ID: 36205 CVECAN ID: CVE-2009-3490 Wget是可使用HTTP、HTTPS和FTP协议的文件检索工具。 Wget没有正确地处理X.509证书主题通用名称（CN）字段域名中的空字符（\0），在处理包含有空字符的证书字段时错误地将空字符处理为截止字符，因此只会验证空字符前的部分。例如，对于类似于以下的名称： example.com\0.haxx.se 证书是发布给haxx.se的，但Wget错误的验证给example.com，这有助于攻击者通过中间人攻击执行网络钓鱼等欺骗。 Micah Cowan Wget 1.12 厂商补丁： RedHat...

RHEL 4 / 5 : wget (RHSA-2009:1549)

The remote Redhat Enterprise Linux 4 / 5 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2009:1549 advisory. - wget: incorrect verification of SSL certificate with NUL in name CVE-2009-3490 Note that Nessus has not tested for this issue but has instead...

wget security update

CentOS Errata and Security Advisory CESA-2009:1549 An updated wget package that fixes a security issue is now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GNU Wget is a file retrieval utili...

Moderate: Red Hat Security Advisory: wget security update

An updated wget package that fixes a security issue is now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GNU Wget is a file retrieval utility that can use HTTP, HTTPS, and FTP. Daniel Stenbe...

wget: incorrect verification of SSL certificate with NUL in name

GNU Wget before 1.12 does not properly handle a '\0' character in a domain name in the Common Name field of an X.509 certificate, which allows man-in-the-middle remote attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issu...

wget security update

1.11.4-3 - add fix for CVE-2009-3490, incorrect verification of SSL certificate with NUL in name...

Gentoo Security Advisory GLSA 200910-01 (wget)

The remote host is missing updates announced in advisory GLSA 200910-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

GNU Wget SSL Certificate Security Bypass

Binary data 800981.prm...

GNU Wget SSL Certificate Security Bypass

Binary data 5212.prm...

Gentoo Security Advisory GLSA 200910-01 (wget)

The remote host is missing updates announced in advisory GLSA 200910-01. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

GLSA-200910-01 : Wget: Certificate validation error

The remote host is affected by the vulnerability described in GLSA-200910-01 Wget: Certificate validation error The vendor reported that Wget does not properly handle Common Name CN fields in X.509 certificates that contain an ASCII NUL \0 character. Specifically, the processing of such fields is...

Wget: Certificate validation error

Background GNU Wget is a free software package for retrieving files using HTTP, HTTPS and FTP, the most widely-used Internet protocols. Description The vendor reported that Wget does not properly handle Common Name CN fields in X.509 certificates that contain an ASCII NUL \0 character...

Ubuntu USN-842-1 (wget)

The remote host is missing an update to wget announced via advisory USN-842-1. OpenVAS Vulnerability Test $Id: ubuntu8421.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8421.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-842-1 wget Authors: Thomas Reinke...

Debian Security Advisory DSA 1904-1 (wget)

The remote host is missing an update to wget announced via advisory DSA 1904-1. OpenVAS Vulnerability Test $Id: deb19041.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1904-1 wget Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

SLES10: Security update for wget

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: wget More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at http://download.novell.com/patch/finder/ VID...

SLES10: Security update for wget

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: wget More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references. SPDX-FileCopyrightText: 2009 E-So...

Debian: Security Advisory (DSA-1904-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...