CVE-2003-0370
- State
- Published
- Severity
- Not scored
- Published
- Jun 5, 2003
- Updated
- Aug 8, 2024
- Reserved
- Jun 3, 2003
Description
Konqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates via a man-in-the-middle attack.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- RHSA-2003:192vendor-advisory
- 20030510 [forward]Apple Safari and Konqueror Embedded Common Name Verification Vulnerabilitymailing-list
- TLSA-2003-36vendor-advisory
- RHSA-2003:193vendor-advisory
- 20030507 Problem: Multiple Web Browsers do not do not validate CN on certificates.mailing-list
- DSA-361vendor-advisory
- http://www.kde.org/info/security/advisory-20030602-1.txt
- 7520vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.