Wget: Certificate validation error

Background GNU Wget is a free software package for retrieving files using HTTP, HTTPS and FTP, the most widely-used Internet protocols. Description The vendor reported that Wget does not properly handle Common Name CN fields in X.509 certificates that contain an ASCII NUL \0 character...

Debian Security Advisory DSA 1904-1 (wget)

The remote host is missing an update to wget announced via advisory DSA 1904-1. OpenVAS Vulnerability Test $Id: deb19041.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1904-1 wget Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Ubuntu USN-842-1 (wget)

The remote host is missing an update to wget announced via advisory USN-842-1. OpenVAS Vulnerability Test $Id: ubuntu8421.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8421.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-842-1 wget Authors: Thomas Reinke...

SLES10: Security update for wget

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: wget More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at http://download.novell.com/patch/finder/ VID...

SLES10: Security update for wget

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: wget More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references. SPDX-FileCopyrightText: 2009 E-So...

Debian: Security Advisory (DSA-1904-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-842-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SLES11: Security update for wget

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: wget More details may also be found by searching for the SuSE Enterprise Server 11 patch database located at http://download.novell.com/patch/finder/ VID...

SLES11: Security update for wget

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: wget More details may also be found by searching for the SuSE Enterprise Server 11 patch database linked in the references. SPDX-FileCopyrightText: 2009 E-So...

SLES9: Security update for wget

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: wget For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5017044 within the SuSE...

SLES9: Security update for wget

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: wget For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5017044 within the SuSE...

[SECURITY] [DSA 1904-1] New wget packages fix SSL certificate verification weakness

------------------------------------------------------------------------ Debian Security Advisory DSA-1904-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano October 09, 2009 http://www.debian.org/security/faq -...

DSA-1904-1 wget - SSL certificate verification weakness

Bulletin has no description...

Ubuntu wget vulnerability

It was discovered that Wget did not correctly handle SSL certificates with zero bytes in the Common Name. A remote attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications. Ubuntu 6.06 LTS Ubuntu 8.04 LTS Ubuntu 8.10 Ubuntu...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : wget vulnerability (USN-842-1)

It was discovered that Wget did not correctly handle SSL certificates with zero bytes in the Common Name. A remote attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications. Note that Tenable Network Security has extracted th...

[USN-842-1] Wget vulnerability

=========================================================== Ubuntu Security Notice USN-842-1 October 06, 2009 wget vulnerability CVE-2009-3490 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 8.04 LTS Ubuntu...

USN-842-1: Wget vulnerability

It was discovered that Wget did not correctly handle SSL certificates with zero bytes in the Common Name. A remote attacker could exploit this to perform a machine-in-the-middle attack to view sensitive information or alter encrypted communications...

openSUSE 10 Security Update : wget (wget-6427)

This update wget improves the handling of the 0-character in the subject name of a SSL certificate. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update wget-6427. The text description of this plug...

CVE-2009-3490

GNU Wget before 1.12 does not properly handle a '\0' character in a domain name in the Common Name field of an X.509 certificate, which allows man-in-the-middle remote attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issu...

CVE-2009-3490

GNU Wget before 1.12 does not properly handle a '\0' character in a domain name in the Common Name field of an X.509 certificate, which allows man-in-the-middle remote attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issu...