CVE-2003-0370
Fixed in a distro release EPSS 2%
Konqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates via a man-in-the-middle attack.
Products: apple safari, kde konqueror_embedded, kde, redhat linux, turbolinux_server, turbolinux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 3.0 | kdelibs | 4:2.2.2-13.woody.8 |
| Debian 3.0 | kdelibs-crypto | 4:2.2.2-6woody2 |