NVD

Id
14588  
Name
CVE-2010-3170  
Description
Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 recognize a wildcard IP address in the subject"s Common Name field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2010-10-21  
Modified Date
2011-07-18  
Seq
2010-3170  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
80751 14588 CVE-2010-3170 http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox  View
80752 14588 CVE-2010-3170 SUSE-SR:2010:020  View
80753 14588 CVE-2010-3170 oval:org.mitre.oval:def:12254  View
80754 14588 CVE-2010-3170 http://support.avaya.com/css/P8/documents/100114250  View
80755 14588 CVE-2010-3170 http://support.avaya.com/css/P8/documents/100120156  View
80756 14588 CVE-2010-3170 DSA-2123  View
80757 14588 CVE-2010-3170 MDVSA-2010:210  View
80758 14588 CVE-2010-3170 http://www.mozilla.org/security/announce/2010/mfsa2010-70.html  View
80759 14588 CVE-2010-3170 RHSA-2010:0781  View
80760 14588 CVE-2010-3170 RHSA-2010:0782  View
80761 14588 CVE-2010-3170 USN-1007-1  View
80762 14588 CVE-2010-3170 ADV-2011-0061  View
80763 14588 CVE-2010-3170 https://bugzilla.mozilla.org/show_bug.cgi?id=578697  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36514 JVNDB-2010-002294 複数の Mozilla 製品における X.509 証明書の処理に関する任意の SSL サーバになりすまされる脆弱性 複数の Mozilla 製品は、X.509 証明書のサブジェクトの Common Name フィールド内のワイルドカードが付与された IP アドレスを認証してしまうため、任意の SSL サーバになりすまされる脆弱性が存在します。 CVE-2010-3170 45750 CVE-2010-3170 14588 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002294.html 2010-10-19 2012-12-18 View