CVE-2003-0355

Safari 1.0 Beta 2 (v73) and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2003-06-09

Last modified

2024-09-17

Affected products

• Safari (Apple)
• Konqueror Embedded (Kde)

References

• http://www.securityfocus.com/archive/1/320707