CVE-2003-0370

published 2003-06-16

CVE-2003-0370: Konqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof…

high 7.5 CVSS 3.1

AV N AC L Au N C P I P A P

Konqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates via a man-in-the-middle attack.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
apple	safari	—	—
kde	kde	<= 2.2.2	—
kde	konqueror_embedded	—	—
redhat	linux	—	—
redhat	linux	—	—
turbolinux	turbolinux_server	—	—
turbolinux	turbolinux_server	—	—
turbolinux	turbolinux_workstation	—	—
turbolinux	turbolinux_workstation	—	—