Red Hat Security AdvisoryRHSA-2009:1549
wget security update
Released 2009-11-03 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 wget-1.10.2-0.30E.1, wget-1.10.2-0.30E.1.i386
- Red Hat Enterprise Linux (v. 5 server) wget-1.11.4-2.el5_4.1, wget-1.11.4-2.el5_4.1.i386, wget-1.11.4-2.el5_4.1.ia64 +1
- Red Hat Enterprise Linux AS version 3 wget-1.10.2-0.30E.1, wget-1.10.2-0.30E.1.i386, wget-1.10.2-0.30E.1.ia64 +1
- Red Hat Enterprise Linux AS version 4 wget-1.10.2-1.el4_8.1, wget-1.10.2-1.el4_8.1.i386, wget-1.10.2-1.el4_8.1.ia64 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) wget-1.11.4-2.el5_4.1, wget-1.11.4-2.el5_4.1.i386
- Red Hat Enterprise Linux Desktop version 4 wget-1.10.2-1.el4_8.1, wget-1.10.2-1.el4_8.1.i386
- Red Hat Enterprise Linux ES version 3 wget-1.10.2-0.30E.1, wget-1.10.2-0.30E.1.i386, wget-1.10.2-0.30E.1.ia64
- Red Hat Enterprise Linux ES version 4 wget-1.10.2-1.el4_8.1, wget-1.10.2-1.el4_8.1.i386, wget-1.10.2-1.el4_8.1.ia64
- Red Hat Enterprise Linux WS version 3 wget-1.10.2-0.30E.1, wget-1.10.2-0.30E.1.i386, wget-1.10.2-0.30E.1.ia64
- Red Hat Enterprise Linux WS version 4 wget-1.10.2-1.el4_8.1, wget-1.10.2-1.el4_8.1.i386, wget-1.10.2-1.el4_8.1.ia64
Fixes 1 record
Priority LOW 36
GNU Wget before 1.12 does not properly handle a '\0' character in a domain name in the Common Name field of an X.509 certificate, which allows man-in-the-middle remote attackers to spoof arbitrary SSL servers via a craft…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.03517 · Published 2009-09-30 · Fixed CWE-310
