Get a Pentest and security assessment of your IT network.

Advisories

Gentoo Linux Security Advisory 200910-1

Gentoo Linux Security Advisory 200910-1 – An error in the X.509 certificate handling of Wget might enable remote attackers to conduct man-in-the-middle attacks. The vendor reported that Wget does not properly handle Common Name (CN) fields in X.509 certificates that contain an ASCII NUL () character. Specifically, the processing of such fields is stopped at the first occurrence of a NUL character. This type of vulnerability was recently discovered by Dan Kaminsky and Moxie Marlinspike. Versions less than 1.12 are affected.

 

You can download this advisory from the following link: https://packetstormsecurity.com/files/download/82091/glsa-200910-01.txt

Source: https://packetstormsecurity.com/files/82091/Gentoo-Linux-Security-Advisory-200910-1.html

Related posts
Advisories

Secunia Security Advisory 15646

Advisories

Secunia Security Advisory 18761

Advisories

deluxeBBflaws.txt

Advisories

Mandriva Linux Security Advisory 2007.061