NVD

Id
58587  
Name
CVE-2007-6592  
Description
Apple Safari 2, when a user accepts an SSL server certificate on the basis of the CN domain name in the DN field, regards the certificate as also accepted for all domain names in subjectAltName:dNSName fields, which makes it easier for remote attackers to trick a user into accepting an invalid certificate for a spoofed web site.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-12-28  
Modified Date
2008-09-05  
Seq
2007-6592  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
300548 58587 CVE-2007-6592 http://nils.toedtmann.net/pub/subjectAltName.txt  View
300549 58587 CVE-2007-6592 3498  View
300550 58587 CVE-2007-6592 20071118 Certificate spoofing issue with Mozilla, Konqueror, Safari 2  View
300551 58587 CVE-2007-6592 20071118 Re: Certificate spoofing issue with Mozilla, Konqueror, Safari 2  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54354 JVNDB-2007-003046 Apple Safari におけるなりすまされた Web サイトの無効な証明書を承認する脆弱性 Apple Safari は、DN フィールド内の CN ドメイン名ベースの SSL サーバ証明書を承認する際、subjectAltName:dNSName フィールド内の全てのドメイン名も承認対象と見なすため、なりすまされた Web サイトの無効な証明書をユーザが騙されて承認する脆弱性が存在します。 CVE-2007-6592 29947 CVE-2007-6592 58587 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003046.html 2007-12-28 2012-06-26 View