NetSight
IP …
high7.5

CVE-2003-0370

Konqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof c…

Impact

Konqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates via a man-in-the-middle attack.

Affected products

VendorProductAffected versions
AppleSafari
Version 1.0
KdeKonqueror Embedded
Version 0.1
KdeKde
through 2.2.2
RedhatLinux
Versions 7.1, 7.2
TurbolinuxTurbolinux Server
Versions 7.0, 8.0
TurbolinuxTurbolinux Workstation
Versions 7.0, 8.0

References