CVE-2003-0370
Published Jun 16, 2003
Last updated 16 years ago
Overview
- Description
- Konqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates via a man-in-the-middle attack.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.5
- Impact score
- 6.4
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:apple:safari:1.0:beta:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "64FE1AA1-32D1-4825-8B2B-E66093937D9F"
},
{
"criteria": "cpe:2.3:a:apple:safari:1.0:beta2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E760CD65-A10E-44F1-B835-DA6B77057C93"
},
{
"criteria": "cpe:2.3:a:kde:konqueror_embedded:0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "68C3DE36-4687-4157-8C7F-223B289B9A8B"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:kde:kde:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4EE0724E-B37D-4177-A117-74F5A39BCC5B",
"versionEndIncluding": "2.2.2"
},
{
"criteria": "cpe:2.3:o:redhat:linux:7.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1D46E093-1C68-43BB-B281-12117EC8DE0F"
},
{
"criteria": "cpe:2.3:o:redhat:linux:7.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E562907F-D915-4030-847A-3C6834A80D4E"
},
{
"criteria": "cpe:2.3:o:turbolinux:turbolinux_server:7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "839D2945-1417-43F5-A526-A14C491CBCEE"
},
{
"criteria": "cpe:2.3:o:turbolinux:turbolinux_server:8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E06DCF0D-3241-453A-A0E4-937FE25EC404"
},
{
"criteria": "cpe:2.3:o:turbolinux:turbolinux_workstation:7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EA8F79B3-2FBD-4CF1-B202-AB302C5F9CC2"
},
{
"criteria": "cpe:2.3:o:turbolinux:turbolinux_workstation:8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9428589A-0BD2-469E-978D-38239117D972"
}
],
"operator": "OR"
}
]
}
]