CVE

Id
29948  
CVE No.
CVE-2007-6591  
Status
Candidate  
Description
KDE Konqueror 3.5.5 and 3.95.00, when a user accepts an SSL server certificate on the basis of the CN domain name in the DN field, regards the certificate as also accepted for all domain names in subjectAltName:dNSName fields, even though these fields cannot be examined in the product, which makes it easier for remote attackers to trick a user into accepting an invalid certificate for a spoofed web site.  
Phase
Assigned (20071228)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
316647 29948 CVE-2007-6591 BUGTRAQ:20071118 Certificate spoofing issue with Mozilla, Konqueror, Safari 2  View
316648 29948 CVE-2007-6591 URL:http://www.securityfocus.com/archive/1/archive/1/483929/100/100/threaded  View
316649 29948 CVE-2007-6591 BUGTRAQ:20071118 RE: Certificate spoofing issue with Mozilla, Konqueror, Safari 2  View
316650 29948 CVE-2007-6591 URL:http://www.securityfocus.com/archive/1/archive/1/483960/100/100/threaded  View
316651 29948 CVE-2007-6591 BUGTRAQ:20071118 Re: Certificate spoofing issue with Mozilla, Konqueror, Safari 2  View
316652 29948 CVE-2007-6591 URL:http://www.securityfocus.com/archive/1/archive/1/483937/100/100/threaded  View
316653 29948 CVE-2007-6591 MISC:http://nils.toedtmann.net/pub/subjectAltName.txt  View
316654 29948 CVE-2007-6591 SREASON:3498  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52390 JVNDB-2007-001082 Autonomy KeyView における複数のバッファオーバーフローの脆弱性 IBM Lotus Notes で使用されている Autonomy (Verity) の KeyView SDK には、l123sr.dll において、Worksheet ファイル (WKS) フォーマットの Lotus 1-2-3 (.123) ファイル中の Length フィールドおよび Value フィールドのチェック処理に不備があり、複数のバッファオーバーフローが発生する脆弱性が存在します。 CVE-2007-6593 29948 8.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001082.html  View