← Back

CVE-2009-3490

nvd nist
Published: Sep 30, 2009Modified: Apr 23, 2026

JSON object

Loading...
6.8
Vector
AV:N/AC:M/Au:N/C:P/I:P/A:P
Exploitability: 8.6 / Impact: 6.4
Source: NVD

Description

GNU Wget before 1.12 does not properly handle a '\0' character in a domain name in the Common Name field of an X.509 certificate, which allows man-in-the-middle remote attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

Affected (16)

Products: Gnu: Wget
Gnu
1 product
Wget
Configuration A
16 vulnerable
Vulnerable SoftwareAffected Versions
Gnu
Wget
Up to 1.11.4
Wget
Version 1.10.1
Wget
Version 1.10.2
Wget
Version 1.10
Wget
Version 1.11.1
Wget
Version 1.11.2
Wget
Version 1.11.3
Wget
Version 1.11
Wget
Version 1.5.3
Wget
Version 1.6
Wget
Version 1.7.1
Wget
Version 1.7
Wget
Version 1.8.1
Wget
Version 1.8
Wget
Version 1.9.1
Wget
Version 1.9

Related CWEs

CWE-310
CWE-310

References (22)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.