NVD

Id
2703  
Name
CVE-2008-2809  
Description
Mozilla 1.9 M8 and earlier, Mozilla Firefox 2 before 2.0.0.15, SeaMonkey 1.1.5 and other versions before 1.1.10, Netscape 9.0, and other Mozilla-based web browsers, when a user accepts an SSL server certificate on the basis of the CN domain name in the DN field, regard the certificate as also accepted for all domain names in subjectAltName:dNSName fields, which makes it easier for remote attackers to trick a user into accepting an invalid certificate for a spoofed web site.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-07-08  
Modified Date
2012-11-26  
Seq
2008-2809  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
17198 2703 CVE-2008-2809 SUSE-SA:2008:034  View
17199 2703 CVE-2008-2809 http://nils.toedtmann.net/pub/subjectAltName.txt  View
17200 2703 CVE-2008-2809 oval:org.mitre.oval:def:10205  View
17201 2703 CVE-2008-2809 RHSA-2008:0616  View
17202 2703 CVE-2008-2809 GLSA-200808-03  View
17203 2703 CVE-2008-2809 3498  View
17204 2703 CVE-2008-2809 1018979  View
17205 2703 CVE-2008-2809 SSA:2008-191-03  View
17206 2703 CVE-2008-2809 SSA:2008-191  View
17207 2703 CVE-2008-2809 SSA:2008-210-05  View
17208 2703 CVE-2008-2809 256408  View
17209 2703 CVE-2008-2809 http://wiki.rpath.com/Advisories:rPSA-2008-0216  View
17210 2703 CVE-2008-2809 DSA-1607  View
17211 2703 CVE-2008-2809 DSA-1615  View
17212 2703 CVE-2008-2809 DSA-1621  View
17213 2703 CVE-2008-2809 DSA-1697  View
17214 2703 CVE-2008-2809 MDVSA-2008:136  View
17215 2703 CVE-2008-2809 MDVSA-2008:155  View
17216 2703 CVE-2008-2809 http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.15  View
17217 2703 CVE-2008-2809 http://www.mozilla.org/security/announce/2008/mfsa2008-31.html  View
17218 2703 CVE-2008-2809 RHSA-2008:0547  View
17219 2703 CVE-2008-2809 RHSA-2008:0549  View
17220 2703 CVE-2008-2809 RHSA-2008:0569  View
17221 2703 CVE-2008-2809 20071118 Certificate spoofing issue with Mozilla, Konqueror, Safari 2  View
17222 2703 CVE-2008-2809 20071118 Re: Certificate spoofing issue with Mozilla, Konqueror, Safari 2  View
17223 2703 CVE-2008-2809 20071118 RE: Certificate spoofing issue with Mozilla, Konqueror, Safari 2  View
17224 2703 CVE-2008-2809 20080708 rPSA-2008-0216-1 firefox  View
17225 2703 CVE-2008-2809 30038  View
17226 2703 CVE-2008-2809 1020419  View
17227 2703 CVE-2008-2809 USN-619-1  View
17228 2703 CVE-2008-2809 USN-629-1  View
17229 2703 CVE-2008-2809 ADV-2008-1993  View
17230 2703 CVE-2008-2809 ADV-2009-0977  View
17231 2703 CVE-2008-2809 mozilla-altnames-spoofing(43524)  View
17232 2703 CVE-2008-2809 https://bugzilla.mozilla.org/show_bug.cgi?id=240261  View
17233 2703 CVE-2008-2809 https://bugzilla.mozilla.org/show_bug.cgi?id=327181  View
17234 2703 CVE-2008-2809 https://bugzilla.mozilla.org/show_bug.cgi?id=402347  View
17235 2703 CVE-2008-2809 https://issues.rpath.com/browse/RPL-2646  View
17236 2703 CVE-2008-2809 FEDORA-2008-6737  View
17237 2703 CVE-2008-2809 FEDORA-2008-6706  View
17238 2703 CVE-2008-2809 FEDORA-2008-6127  View
17239 2703 CVE-2008-2809 FEDORA-2008-6193  View
17240 2703 CVE-2008-2809 FEDORA-2008-6196  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46201 JVNDB-2008-001511 複数の Mozilla 製品における偽サイトの SSL 証明書を受け入れてしまう脆弱性 複数の Mozilla 製品には、DN フィールドに CN ドメイン名のユーザが SSL サーバ証明書を受け取った場合、subjectAltName:dNSName フィールド内のドメイン名も受け入れる脆弱性が存在します。 CVE-2008-2809 32922 CVE-2008-2809 2703 4 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001511.html 2008-07-01 2009-04-27 View