NVD

Id
71184  
Name
CVE-2004-0758  
Description
Mozilla 1.5 through 1.7 allows a CA certificate to be imported even when their DN is the same as that of the built-in CA root certificate, which allows remote attackers to cause a denial of service to SSL pages because the malicious certificate is treated as invalid.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-07-18  
Published
2004-08-18  
Modified Date
2017-07-10  
Seq
2004-0758  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
367583 71184 CVE-2004-0758 SCOSA-2005.49  View
367584 71184 CVE-2004-0758 http://bugzilla.mozilla.org/show_bug.cgi?id=249004  View
367585 71184 CVE-2004-0758 FLSA:2089  View
367586 71184 CVE-2004-0758 oval:org.mitre.oval:def:10304  View
367587 71184 CVE-2004-0758 oval:org.mitre.oval:def:3134  View
367588 71184 CVE-2004-0758 GLSA-200408-22  View
367589 71184 CVE-2004-0758 VU#784278  View
367590 71184 CVE-2004-0758 http://www.mozilla.org/projects/security/known-vulnerabilities.html  View
367591 71184 CVE-2004-0758 SUSE-SA:2004:036  View
367592 71184 CVE-2004-0758 RHSA-2004:421  View
367593 71184 CVE-2004-0758 15495  View
367594 71184 CVE-2004-0758 mozilla-certificate-dos(16706)  View
367595 71184 CVE-2004-0758 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127186  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62965 JVNDB-2004-000307 Mozilla 製品における CA 証明書の偽装により SSL サイトにアクセスできなくなる問題 Mozilla 製品には、悪質な電子メール証明書を受け取ることでルート CA (認証局) 証明書と同じ DN (識別名) を持つ偽装証明書が標的ユーザのシステム上にインポートされ、組み込みの CA 証明書が偽装されてしまう可能性があります。 CVE-2004-0758 9185 CVE-2004-0758 71184 5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000307.html 2004-08-04 2007-04-01 View