CVE-2001-0338
Published Jun 27, 2001
Last updated 3 years ago
Overview
- Description
- Internet Explorer 5.5 and earlier does not properly validate digital certificates when Certificate Revocation List (CRL) checking is enabled, which could allow remote attackers to spoof trusted web sites, aka the "Server certificate validation vulnerability."
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 5.1
- Impact score
- 6.4
- Exploitability score
- 4.9
- Vector string
- AV:N/AC:H/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7BDFCFCB-6E90-4F29-9852-A3099DF05843",
"versionEndIncluding": "5.5"
},
{
"criteria": "cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"
}
],
"operator": "OR"
}
]
}
]