CVE

Id
9193  
CVE No.
CVE-2004-0765  
Status
Candidate  
Description
The cert_TestHostName function in Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, only checks the hostname portion of a certificate when the hostname portion of the URI is not a fully qualified domain name (FQDN), which allows remote attackers to spoof trusted certificates.  
Phase
Assigned (20040802)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
60235 9193 CVE-2004-0765 CONFIRM:http://bugzilla.mozilla.org/show_bug.cgi?id=234058  View
60236 9193 CVE-2004-0765 CONFIRM:http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7  View
60237 9193 CVE-2004-0765 FEDORA:FLSA:2089  View
60238 9193 CVE-2004-0765 URL:http://marc.info/?l=bugtraq&m=109900315219363&w=2  View
60239 9193 CVE-2004-0765 REDHAT:RHSA-2004:421  View
60240 9193 CVE-2004-0765 URL:http://www.redhat.com/support/errata/RHSA-2004-421.html  View
60241 9193 CVE-2004-0765 SUSE:SUSE-SA:2004:036  View
60242 9193 CVE-2004-0765 URL:http://www.novell.com/linux/security/advisories/2004_36_mozilla.html  View
60243 9193 CVE-2004-0765 OVAL:oval:org.mitre.oval:def:11162  View
60244 9193 CVE-2004-0765 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11162  View
60245 9193 CVE-2004-0765 XF:mozilla-certtesthostname-certificate-spoof(16868)  View

Related JVN