Fedora 12 : wget-1.12-2.fc12 (2009-11836)

Wed Nov 18 2009 Karsten Hopp 1.12-2 - don't provide /usr/share/info/dir - Tue Nov 17 2009 Karsten Hopp 1.12-1 - update to wget-1.12 - fixes CVE-2009-3490 wget: incorrect verification of SSL certificate with NUL in name Note that Tenable Network Security has extracted the preceding description...

Fedora 11 : wget-1.12-2.fc11 (2009-11740)

Wed Nov 18 2009 Karsten Hopp 1.12-2 - don't provide /usr/share/info/dir - Tue Nov 17 2009 Karsten Hopp 1.12-1 - update to wget-1.12 - fixes CVE-2009-3490 wget: incorrect verification of SSL certificate with NUL in name - Fri Aug 21 2009 Tomas Mraz - 1.11.4-5 - rebuilt with new openssl - Mon Jul...

Fedora 10 : wget-1.12-2.fc10 (2009-11739)

Wed Nov 18 2009 Karsten Hopp 1.12-2 - don't provide /usr/share/info/dir - Tue Nov 17 2009 Karsten Hopp 1.12-1 - update to wget-1.12 - fixes CVE-2009-3490 wget: incorrect verification of SSL certificate with NUL in name - Fri Aug 21 2009 Tomas Mraz - 1.11.4-5 - rebuilt with new openssl - Mon Jul...

Solaris 10 (x86) : 125216-07 (deprecated)

SunOS 5.10x86: wget patch. Date this patch was last updated by Sun : Sep/15/16 This plugin has been deprecated and either replaced with individual 125216 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2018/03/1...

Solaris 10 (sparc) : 125215-07 (deprecated)

SunOS 5.10: wget patch. Date this patch was last updated by Sun : Sep/15/16 This plugin has been deprecated and either replaced with individual 125215 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2018/03/12...

CentOS Security Advisory CESA-2009:1549 (wget)

The remote host is missing updates to wget announced in advisory CESA-2009:1549. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

RedHat Security Advisory RHSA-2009:1549

The remote host is missing updates announced in advisory RHSA-2009:1549. GNU Wget is a file retrieval utility that can use HTTP, HTTPS, and FTP. Daniel Stenberg reported that Wget is affected by the previously published null prefix attack, caused by incorrect handling of NULL characters in X.509...

RedHat Security Advisory RHSA-2009:1549

The remote host is missing updates announced in advisory RHSA-2009:1549. GNU Wget is a file retrieval utility that can use HTTP, HTTPS, and FTP. Daniel Stenberg reported that Wget is affected by the previously published null prefix attack, caused by incorrect handling of NULL characters in X.509...

CentOS Security Advisory CESA-2009:1549 (wget)

The remote host is missing updates to wget announced in advisory CESA-2009:1549. CESA-2009:1549 66220 6 $Id: ovcesa20091549.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1549 wget Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Wget CA SSL畸形证书验证漏洞

BUGTRAQ ID: 36205 CVECAN ID: CVE-2009-3490 Wget是可使用HTTP、HTTPS和FTP协议的文件检索工具。 Wget没有正确地处理X.509证书主题通用名称（CN）字段域名中的空字符（\0），在处理包含有空字符的证书字段时错误地将空字符处理为截止字符，因此只会验证空字符前的部分。例如，对于类似于以下的名称： example.com\0.haxx.se 证书是发布给haxx.se的，但Wget错误的验证给example.com，这有助于攻击者通过中间人攻击执行网络钓鱼等欺骗。 Micah Cowan Wget 1.12 厂商补丁： RedHat...

RHEL 4 / 5 : wget (RHSA-2009:1549)

The remote Redhat Enterprise Linux 4 / 5 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2009:1549 advisory. - wget: incorrect verification of SSL certificate with NUL in name CVE-2009-3490 Note that Nessus has not tested for this issue but has instead...

wget security update

CentOS Errata and Security Advisory CESA-2009:1549 An updated wget package that fixes a security issue is now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GNU Wget is a file retrieval utili...

wget: incorrect verification of SSL certificate with NUL in name

GNU Wget before 1.12 does not properly handle a '\0' character in a domain name in the Common Name field of an X.509 certificate, which allows man-in-the-middle remote attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issu...

Moderate: Red Hat Security Advisory: wget security update

An updated wget package that fixes a security issue is now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GNU Wget is a file retrieval utility that can use HTTP, HTTPS, and FTP. Daniel Stenbe...

wget security update

1.11.4-3 - add fix for CVE-2009-3490, incorrect verification of SSL certificate with NUL in name...

Gentoo Security Advisory GLSA 200910-01 (wget)

The remote host is missing updates announced in advisory GLSA 200910-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

GNU Wget SSL Certificate Security Bypass

Binary data 800981.prm...

GNU Wget SSL Certificate Security Bypass

Binary data 5212.prm...

Gentoo Security Advisory GLSA 200910-01 (wget)

The remote host is missing updates announced in advisory GLSA 200910-01. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

GLSA-200910-01 : Wget: Certificate validation error

The remote host is affected by the vulnerability described in GLSA-200910-01 Wget: Certificate validation error The vendor reported that Wget does not properly handle Common Name CN fields in X.509 certificates that contain an ASCII NUL \0 character. Specifically, the processing of such fields is...