KDE / Konqueror Embedded Common Name Certificate Validation Vulnerability
BID:7520
Info
KDE / Konqueror Embedded Common Name Certificate Validation Vulnerability
| Bugtraq ID: | 7520 |
| Class: | Design Error |
| CVE: |
CVE-2003-0370 |
| Remote: | Yes |
| Local: | No |
| Published: | May 07 2003 12:00AM |
| Updated: | Feb 21 2007 05:36PM |
| Credit: | Discovery of this issue is credited to Simson L. Garfinkel and Jesse Burns. |
| Vulnerable: |
Turbolinux Turbolinux Workstation 8.0 Turbolinux Turbolinux Workstation 7.0 Turbolinux Turbolinux Server 8.0 Turbolinux Turbolinux Server 7.0 KDE Konqueror Embedded 0.1 KDE KDE 2.2.2 |
| Not Vulnerable: |
KDE KDE 3.1.1 a KDE KDE 3.1.1 KDE KDE 3.1 KDE KDE 3.0.5 b KDE KDE 3.0.5 a KDE KDE 3.0.5 KDE KDE 3.0.4 KDE KDE 3.0.3 a KDE KDE 3.0.3 KDE KDE 3.0.2 KDE KDE 3.0.1 KDE KDE 3.0 |
References
KDE / Konqueror Embedded Common Name Certificate Validation Vulnerability
References:
References:
- KDE Security Advisory: KDE 2.2 / Konqueror Embedded SSL vulnerability (KDE)
- Konqueror Embedded Homepage (Konqueror)
- RHSA-2003:193-08 (RedHat)
- Sun Alert ID: 55660 (Sun)
- Sun Linux Support - Sun Linux Patches (Sun)
- Problem: Multiple Web Browsers do not do not validate CN on certificates. ("Simson L. Garfinkel"