NVD

Id
58586  
Name
CVE-2007-6591  
Description
KDE Konqueror 3.5.5 and 3.95.00, when a user accepts an SSL server certificate on the basis of the CN domain name in the DN field, regards the certificate as also accepted for all domain names in subjectAltName:dNSName fields, even though these fields cannot be examined in the product, which makes it easier for remote attackers to trick a user into accepting an invalid certificate for a spoofed web site.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-12-28  
Modified Date
2008-09-05  
Seq
2007-6591  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
300543 58586 CVE-2007-6591 http://nils.toedtmann.net/pub/subjectAltName.txt  View
300544 58586 CVE-2007-6591 3498  View
300545 58586 CVE-2007-6591 20071118 Certificate spoofing issue with Mozilla, Konqueror, Safari 2  View
300546 58586 CVE-2007-6591 20071118 Re: Certificate spoofing issue with Mozilla, Konqueror, Safari 2  View
300547 58586 CVE-2007-6591 20071118 RE: Certificate spoofing issue with Mozilla, Konqueror, Safari 2  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
56088 JVNDB-2007-004780 KDE における偽造 Web サイトの無効な証明書をユーザが受領する脆弱性 KDE は、DN フィールドの CN ドメイン名ベースの SSL サーバの証明書をユーザが受領した際、subjectAltName:dNSName フィールド内の全てのドメイン名に受け入れられた証明書であると見なすため、製品内で検証できないにも関わらず、なりすまされた Web サイトの無効な証明書をユーザが受領する脆弱性が存在します。 CVE-2007-6591 29946 CVE-2007-6591 58586 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004780.html 2007-12-28 2012-09-25 View