CVE

Id
7198  
CVE No.
CVE-2003-0370  
Status
Candidate  
Description
Konqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates via a man-in-the-middle attack.  
Phase
Assigned (20030603)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
42221 7198 CVE-2003-0370 CONFIRM:http://www.kde.org/info/security/advisory-20030602-1.txt  View
42222 7198 CVE-2003-0370 FULLDISC:20030510 [forward]Apple Safari and Konqueror Embedded Common Name Verification Vulnerability  View
42223 7198 CVE-2003-0370 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2003-May/004983.html  View
42224 7198 CVE-2003-0370 BUGTRAQ:20030507 Problem: Multiple Web Browsers do not do not validate CN on certificates.  View
42225 7198 CVE-2003-0370 URL:http://www.securityfocus.com/archive/1/320707  View
42226 7198 CVE-2003-0370 REDHAT:RHSA-2003:192  View
42227 7198 CVE-2003-0370 URL:http://www.redhat.com/support/errata/RHSA-2003-192.html  View
42228 7198 CVE-2003-0370 REDHAT:RHSA-2003:193  View
42229 7198 CVE-2003-0370 URL:http://www.redhat.com/support/errata/RHSA-2003-193.html  View
42230 7198 CVE-2003-0370 TURBO:TLSA-2003-36  View
42231 7198 CVE-2003-0370 URL:http://www.turbolinux.com/security/TLSA-2003-36.txt  View
42232 7198 CVE-2003-0370 DEBIAN:DSA-361  View
42233 7198 CVE-2003-0370 URL:http://www.debian.org/security/2003/dsa-361  View
42234 7198 CVE-2003-0370 BID:7520  View

Related JVN