CVE-2003-0355 — MEDIUM (5.0)

Vulnerability Description

Safari 1.0 Beta 2 (v73) and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates.

CVSS Score

5.0

MEDIUM

AV:N/AC:L/Au:N/C:N/I:N/A:P

Confidentiality

NONE

Integrity

NONE

Availability

PARTIAL

Affected Products

Vendor	Product	Versions
Apple	Safari	1.0
Kde	Konqueror Embedded	All versions

References

http://www.securityfocus.com/archive/1/320707
http://www.securityfocus.com/archive/1/320707

FAQ

What is CVE-2003-0355?

CVE-2003-0355 is a vulnerability with a CVSS score of 5.0 (MEDIUM). Safari 1.0 Beta 2 (v73) and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates.

How severe is CVE-2003-0355?

CVE-2003-0355 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2003-0355?

Check the references section above for vendor advisories and patch information. Affected products include: Apple Safari, Kde Konqueror Embedded.