NVD

Id
79966  
Name
CVE-2002-0970  
Description
The SSL capability for Konqueror in KDE 3.0.2 and earlier does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-05  
Published
2002-09-24  
Modified Date
2016-10-17  
Seq
2002-0970  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
398742 79966 CVE-2002-0970 CSSA-2002-047.0  View
398743 79966 CVE-2002-0970 20020818 KDE Security Advisory: Konqueror SSL vulnerability  View
398744 79966 CVE-2002-0970 CLA-2002:519  View
398745 79966 CVE-2002-0970 20020812 Re: IE SSL Vulnerability (Konqueror affected too)  View
398746 79966 CVE-2002-0970 DSA-155  View
398747 79966 CVE-2002-0970 http://www.kde.org/info/security/advisory-20020818-1.txt  View
398748 79966 CVE-2002-0970 MDKSA-2002:058  View
398749 79966 CVE-2002-0970 RHSA-2002:220  View
398750 79966 CVE-2002-0970 RHSA-2002:221  View
398751 79966 CVE-2002-0970 5410  View
398752 79966 CVE-2002-0970 ssl-ca-certificate-spoofing(9776)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63968 JVNDB-2002-000295 KDE の Konqueror における信頼されたサイトの証明書を偽装される脆弱性 ------------ CVE-2002-0970 5358 CVE-2002-0970 79966 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000295.html 2002-12-04 2007-04-01 View