CVE-2003-0370: High severity Apple Safari vulnerability
Konqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates via a man-in-the-middle attack.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2003-0370?
CVE-2003-0370 is considered a medium severity vulnerability due to its potential for man-in-the-middle attacks.
How do I fix CVE-2003-0370?
To fix CVE-2003-0370, update to a version of KDE or Konqueror that properly validates the Common Name (CN) field of X.509 certificates.
Which software versions are affected by CVE-2003-0370?
CVE-2003-0370 impacts KDE versions up to 2.2.2 and Konqueror Embedded version 0.1, as well as specific versions of Apple Safari and Red Hat Linux.
Can CVE-2003-0370 allow for certificate spoofing?
Yes, CVE-2003-0370 allows attackers to spoof certificates due to improper validation of the CN field.
Is CVE-2003-0370 exploitable remotely?
Yes, CVE-2003-0370 can be exploited remotely through a man-in-the-middle attack.