CVE-2003-0355 in Safari

Summary

Safari 1.0 Beta 2 (v73) and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Reservation: 05/29/2003
• Disclosure: 06/09/2003
• Moderation: VulDB entry created
• Entries: VDB-20508 (1)
• CPE: ready
• CWE: CWE-290 (Confirmed)
• CVSS: 7.3
• EPSS: 0.00353
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2003-0355
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2003-0355
• CVE Details: https://www.cvedetails.com/cve/CVE-2003-0355/