Skip to content
OpenAdvisories
Unscored DSA-1904-1 1 CVE

wget - SSL certificate verification weakness

Published Oct 9, 2009 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 4.0 wget 1.10.2-2+etch1
Debian · 5.0 wget 1.11.4-2+lenny1

Vulnerabilities 1

  • Unscored —
    CVE-2009-3490

    GNU Wget before 1.12 does not properly handle a '\0' character in a domain name in the Common Name field of an X.509 ce…

    wget Debian