CVE-2007-6591
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
28/12/2007
Last modified:
15/10/2018
Description
KDE Konqueror 3.5.5 and 3.95.00, when a user accepts an SSL server certificate on the basis of the CN domain name in the DN field, regards the certificate as also accepted for all domain names in subjectAltName:dNSName fields, even though these fields cannot be examined in the product, which makes it easier for remote attackers to trick a user into accepting an invalid certificate for a spoofed web site.
Impact
Base Score 2.0
4.30
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:kde:konqueror:3.5.5:*:*:*:*:*:*:* | ||
cpe:2.3:a:kde:konqueror:3.95.00:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page