CVE-2004-0758: Medium severity Mozilla Mozilla vulnerability
Mozilla 1.5 through 1.7 allows a CA certificate to be imported even when their DN is the same as that of the built-in CA root certificate, which allows remote attackers to cause a denial of service to SSL pages because the malicious certificate is treated as invalid.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0758?
CVE-2004-0758 has been classified with a moderate severity due to its potential to cause a denial of service on SSL pages.
How do I fix CVE-2004-0758?
To mitigate CVE-2004-0758, users should update to a newer version of Mozilla or disable the import of CA certificates that match built-in CA root certificates.
What versions of Mozilla are affected by CVE-2004-0758?
CVE-2004-0758 affects Mozilla versions 1.5 through 1.7.
What type of attack is associated with CVE-2004-0758?
CVE-2004-0758 enables remote attackers to conduct denial of service attacks on SSL pages.
Is there a workaround for CVE-2004-0758?
A possible workaround for CVE-2004-0758 is to manually manage and verify CA certificates to avoid conflicts with built-in root certificates.