CVE

Id
5358  
CVE No.
CVE-2002-0970  
Status
Entry  
Description
The SSL capability for Konqueror in KDE 3.0.2 and earlier does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
28785 5358 CVE-2002-0970 BUGTRAQ:20020812 Re: IE SSL Vulnerability (Konqueror affected too)  View
28786 5358 CVE-2002-0970 URL:http://marc.info/?l=bugtraq&m=102918241005893&w=2  View
28787 5358 CVE-2002-0970 BUGTRAQ:20020818 KDE Security Advisory: Konqueror SSL vulnerability  View
28788 5358 CVE-2002-0970 URL:http://archives.neohapsis.com/archives/bugtraq/2002-08/0170.html  View
28789 5358 CVE-2002-0970 CONFIRM:http://www.kde.org/info/security/advisory-20020818-1.txt  View
28790 5358 CVE-2002-0970 DEBIAN:DSA-155  View
28791 5358 CVE-2002-0970 URL:http://www.debian.org/security/2002/dsa-155  View
28792 5358 CVE-2002-0970 MANDRAKE:MDKSA-2002:058  View
28793 5358 CVE-2002-0970 URL:http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:058  View
28794 5358 CVE-2002-0970 CALDERA:CSSA-2002-047.0  View
28795 5358 CVE-2002-0970 URL:ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-047.0.txt  View
28796 5358 CVE-2002-0970 CONECTIVA:CLA-2002:519  View
28797 5358 CVE-2002-0970 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000519  View
28798 5358 CVE-2002-0970 REDHAT:RHSA-2002:220  View
28799 5358 CVE-2002-0970 URL:http://www.redhat.com/support/errata/RHSA-2002-220.html  View
28800 5358 CVE-2002-0970 REDHAT:RHSA-2002:221  View
28801 5358 CVE-2002-0970 URL:http://www.redhat.com/support/errata/RHSA-2002-221.html  View
28802 5358 CVE-2002-0970 XF:ssl-ca-certificate-spoofing(9776)  View
28803 5358 CVE-2002-0970 URL:http://xforce.iss.net/xforce/xfdb/9776  View
28804 5358 CVE-2002-0970 BID:5410  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63968 JVNDB-2002-000295 KDE の Konqueror における信頼されたサイトの証明書を偽装される脆弱性 ------------ CVE-2002-0970 5358 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000295.html  View