CVE

Id
11443  
CVE No.
CVE-2005-0237  
Status
Candidate  
Description
The International Domain Name (IDN) support in Konqueror 3.2.1 on KDE 3.2.1 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.  
Phase
Assigned (20050207)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
81623 11443 CVE-2005-0237 FULLDISC:20050206 state of homograph attacks  View
81624 11443 CVE-2005-0237 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html  View
81625 11443 CVE-2005-0237 FULLDISC:20050206 Re: state of homograph attacks  View
81626 11443 CVE-2005-0237 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031460.html  View
81627 11443 CVE-2005-0237 MISC:http://www.shmoo.com/idn  View
81628 11443 CVE-2005-0237 MISC:http://www.shmoo.com/idn/homograph.txt  View
81629 11443 CVE-2005-0237 CONFIRM:http://www.kde.org/info/security/advisory-20050316-2.txt  View
81630 11443 CVE-2005-0237 FEDORA:FLSA:178606  View
81631 11443 CVE-2005-0237 URL:http://www.securityfocus.com/archive/1/archive/1/427976/100/0/threaded  View
81632 11443 CVE-2005-0237 MANDRAKE:MDKSA-2005:058  View
81633 11443 CVE-2005-0237 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2005:058  View
81634 11443 CVE-2005-0237 REDHAT:RHSA-2005:325  View
81635 11443 CVE-2005-0237 URL:http://www.redhat.com/support/errata/RHSA-2005-325.html  View
81636 11443 CVE-2005-0237 BID:12461  View
81637 11443 CVE-2005-0237 URL:http://www.securityfocus.com/bid/12461  View
81638 11443 CVE-2005-0237 OVAL:oval:org.mitre.oval:def:10671  View
81639 11443 CVE-2005-0237 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10671  View
81640 11443 CVE-2005-0237 SECUNIA:14162  View
81641 11443 CVE-2005-0237 URL:http://secunia.com/advisories/14162  View
81642 11443 CVE-2005-0237 XF:multiple-browsers-idn-spoof(19236)  View

Related JVN