CVE-2009-3490: GNU Wget before 1.12 does not properly handle a '\0' character in a domain name in the Common Name field of an X.509 certificate, which allows man-in-the-middle remote attackers… | LiveThreat CVE Feed — Verisq

Login Request a demo

Unscored severity · published Sep 30, 2009

CVE-2009-3490

GNU Wget before 1.12 does not properly handle a '\0' character in a domain name in the Common Name field of an X.509 certificate, which allows man-in-the-middle remote attackers…

–

CVSS

3.5%

EPSS

No

On KEV

Description

GNU Wget before 1.12 does not properly handle a '\0' character in a domain name in the Common Name field of an X.509 certificate, which allows man-in-the-middle remote attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

Exploitation

Is it being used?

Exploit prediction (EPSS)3.5% · higher than 89% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

WG

through 1.11.4; 1.5.3; 1.6; 1.7; 1.7.1; 1.8; +10 more · source: NVD

Affected product

WG

Wget

Gnu

References

https://nvd.nist.gov/vuln/detail/CVE-2009-3490

https://www.cve.org/CVERecord?id=CVE-2009-3490

addictivecode.org

http://addictivecode.org/pipermail/wget-notify/2009-August/001808.html

hg.addictivecode.org

http://hg.addictivecode.org/wget/mainline/rev/1eab157d3be7

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705

http://marc.info/?l=oss-security&m=125198917018936&w=2

http://marc.info/?l=oss-security&m=125369675820512&w=2

permalink.gmane.org

http://permalink.gmane.org/gmane.comp.web.wget.general/8972

More from Wget

9.8

Buffer overflow in GNU Wget 1.20.1 and earlier allows remote attackers to cause a denial-of-service (DoS) or may execute an arbitrary code via unspecified vectors

9.1

url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be insecure behavior in which data that was supposed to be in the…

8.8

The retr.c:fd_read_body() function is called when processing OK responses

8.8

The http.c:skip_short_body() function is called in some circumstances, such as when processing redirects

8.8

GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource