SLES9: Security update for wget

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: wget For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5017044 within the SuSE...

[SECURITY] [DSA 1904-1] New wget packages fix SSL certificate verification weakness

------------------------------------------------------------------------ Debian Security Advisory DSA-1904-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano October 09, 2009 http://www.debian.org/security/faq -...

DSA-1904-1 wget - SSL certificate verification weakness

Bulletin has no description...

Ubuntu wget vulnerability

It was discovered that Wget did not correctly handle SSL certificates with zero bytes in the Common Name. A remote attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications. Ubuntu 6.06 LTS Ubuntu 8.04 LTS Ubuntu 8.10 Ubuntu...

[USN-842-1] Wget vulnerability

=========================================================== Ubuntu Security Notice USN-842-1 October 06, 2009 wget vulnerability CVE-2009-3490 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 8.04 LTS Ubuntu...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : wget vulnerability (USN-842-1)

It was discovered that Wget did not correctly handle SSL certificates with zero bytes in the Common Name. A remote attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications. Note that Tenable Network Security has extracted th...

USN-842-1: Wget vulnerability

It was discovered that Wget did not correctly handle SSL certificates with zero bytes in the Common Name. A remote attacker could exploit this to perform a machine-in-the-middle attack to view sensitive information or alter encrypted communications...

openSUSE 10 Security Update : wget (wget-6427)

This update wget improves the handling of the 0-character in the subject name of a SSL certificate. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update wget-6427. The text description of this plug...

CVE-2009-3490

GNU Wget before 1.12 does not properly handle a '\0' character in a domain name in the Common Name field of an X.509 certificate, which allows man-in-the-middle remote attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issu...

CVE-2009-3490

GNU Wget before 1.12 does not properly handle a '\0' character in a domain name in the Common Name field of an X.509 certificate, which allows man-in-the-middle remote attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issu...

CVE-2009-3490

GNU Wget before 1.12 does not properly handle a '\0' character in a domain name in the Common Name field of an X.509 certificate, which allows man-in-the-middle remote attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issu...

DEBIAN-CVE-2009-3490

GNU Wget before 1.12 does not properly handle a '\0' character in a domain name in the Common Name field of an X.509 certificate, which allows man-in-the-middle remote attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issu...

Design/Logic Flaw

GNU Wget before 1.12 does not properly handle a '\0' character in a domain name in the Common Name field of an X.509 certificate, which allows man-in-the-middle remote attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issu...

CVE-2009-3490

CVE-2009-3490 : GNU Wget

CVE-2009-3490

GNU Wget before 1.12 does not properly handle a '\0' character in a domain name in the Common Name field of an X.509 certificate, which allows man-in-the-middle remote attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issu...

CVE-2009-3490

GNU Wget before 1.12 does not properly handle a '\0' character in a domain name in the Common Name field of an X.509 certificate, which allows man-in-the-middle remote attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issu...

SuSE 10 Security Update : wget (ZYPP Patch Number 6426)

This update wget improves the handling of the 0-character in the subject name of a SSL certificate. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41598;...

SuSE 11 Security Update : wget (SAT Patch Number 1197)

This update wget improves the handling of the 0-character in the subject name of a SSL certificate. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, In...

SuSE9 Security Update : wget (YOU Patch Number 11090)

This update fixes a security bug in wget, where evil servers could send terminal escape codes to the user calling wget. This would only affect interactive sessions. CVE-2004-1488 Additionally a previous '.file' fix was found to be buggy and replaced. This bug could lead to '.directories' not bein...

Wget NULL字符SSL证书验证安全绕过漏洞

Bugraq ID: 36205 Wget是一款命令行的下载工具。 Wget处理部分字段中包含NULL '\0'字符的SSL证书时存在错误，攻击者可以利用漏洞伪造恶意SSL证书，并替代合法证书，诱使WGET用户访问，进行中间人等攻击，导致敏感信息泄漏。 GNU wget 1.11.4 GNU wget 1.10.2 GNU wget 1.10.1 GNU wget 1.10 GNU wget 1.9.1 GNU wget 1.9 GNU wget 1.8.2 GNU wget 1.8.1 GNU wget 1.8 GNU wget 1.7.1 GNU wget 1.7 GNU wget...