CVE-2003-0370 in KDE

Riassunto

di MITRE

Konqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates via a man-in-the-middle attack.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Prenotare: 03/06/2003
• Divulgazione: 16/06/2003
• Moderazione: accettato
• Voce: VDB-20559
• CPE: pronto
• CWE: CWE-290 (confermato)
• CVSS: 7.5 (NVD)
• EPSS: 0.02062
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2003-0370
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2003-0370
• CVE Details: https://www.cvedetails.com/cve/CVE-2003-0370/