CVE-2002-1824 in Internet Explorer정보

요약

\~에 의해 MITRE

Microsoft Internet Explorer 6.0, when handling an expired CA-CERT in a webserver s certificate chain during a SSL/TLS handshake, does not prompt the user before searching for and finding a newer certificate, which may allow attackers to perform a man-in-the-middle attack. NOTE: it is not clear whether this poses a vulnerability.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

출처

Interested in the pricing of exploits?

See the underground prices here!