CVE-2009-3490 wget: incorrect verification of SSL certificate with NUL in name

Daniel Stenberg reported that Wget is affected by the previously published 'null prefix attack', caused by incorrect handling of NULL characters in X.509 certificates. If an attacker is able to get a carefully-crafted certificate signed by a trusted Certificate Authority, the attacker could use the certificate during a man-in-the-middle attack and potentially confuse Wget into accepting it by mistake. (CVE-2009-3490)

An updated wget package that fixes a security issue is now available for Red Hat Enterprise Linux 3, 4, and 5.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

GNU Wget is a file retrieval utility that can use HTTP, HTTPS, and FTP.

Daniel Stenberg reported that Wget is affected by the previously published 'null prefix attack', caused by incorrect handling of NULL characters in X.509 certificates. If an attacker is able to get a carefully-crafted certificate signed by a trusted Certificate Authority, the attacker could use the certificate during a man-in-the-middle attack and potentially confuse Wget into accepting it by mistake. (CVE-2009-3490)

Wget users should upgrade to this updated package, which contains a backported patch to correct this issue.

SunOS 5.10: wget patch.
Date this patch was last updated by Sun : Sep/15/16

It was discovered that Wget did not correctly handle SSL certificates with zero bytes in the Common Name. A remote attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Wed Nov 18 2009 Karsten Hopp <karsten at redhat.com>     1.12-2

    - don't provide /usr/share/info/dir

    - Tue Nov 17 2009 Karsten Hopp <karsten at redhat.com>       1.12-1

    - update to wget-1.12

    - fixes CVE-2009-3490 wget: incorrect verification of       SSL certificate with NUL in name

  - Fri Aug 21 2009 Tomas Mraz <tmraz at redhat.com> -     1.11.4-5

    - rebuilt with new openssl

    - Mon Jul 27 2009 Fedora Release Engineering <rel-eng at       lists.fedoraproject.org> - 1.11.4-4

    - Rebuilt for       https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2009-1549 advisory.

    [1.11.4-3]
    - add fix for CVE-2009-3490,       incorrect verification of SSL certificate with NUL in name

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

SunOS 5.10: wget patch.
Date this patch was last updated by Sun : Oct/14/19

The remote host is affected by the vulnerability described in GLSA-200910-01 (Wget: Certificate validation error)

    The vendor reported that Wget does not properly handle Common Name (CN)     fields in X.509 certificates that contain an ASCII NUL (\\0) character.
    Specifically, the processing of such fields is stopped at the first     occurrence of a NUL character. This type of vulnerability was recently     discovered by Dan Kaminsky and Moxie Marlinspike.
  Impact :

    A remote attacker might employ a specially crafted X.509 certificate,     containing a NUL character in the Common Name field to conduct     man-in-the-middle attacks on SSL connections made using Wget.
  Workaround :

    There is no known workaround at this time.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
60690	Scientific Linux Security Update : wget on SL3.x, SL4.x, SL5.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	medium
67069	CentOS 3 / 4 / 5 : wget (CESA-2009:1549)	Nessus	CentOS Local Security Checks	2013/6/29	2021/1/4	medium
107422	Solaris 10 (sparc) : 125215-07	Nessus	Solaris Local Security Checks	2018/3/12	2025/10/24	medium
42050	Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : wget vulnerability (USN-842-1)	Nessus	Ubuntu Local Security Checks	2009/10/7	2021/1/19	medium
42987	Fedora 11 : wget-1.12-2.fc11 (2009-11740)	Nessus	Fedora Local Security Checks	2009/12/3	2021/1/11	medium
67954	Oracle Linux 5 : wget (ELSA-2009-1549)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2024/10/22	critical
129871	Solaris 10 (sparc) : 125215-08	Nessus	Solaris Local Security Checks	2019/10/15	2020/1/7	medium
42197	GLSA-200910-01 : Wget: Certificate validation error	Nessus	Gentoo Local Security Checks	2009/10/22	2021/1/6	medium

检测

插件搜索

medium

medium

medium

medium

medium

critical

medium

medium