Unscored severity · published Jun 16, 2003
CVE-2003-0370
Konqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates via a…
–
CVSS
2.1%
EPSS
No
On KEV
Description
Konqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates via a man-in-the-middle attack.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KD
Kde · Kde
through 2.2.2 · source: NVD
KE
Konqueror Embedded · Kde
0.1 · source: NVD
LI
Linux · Redhat
7.1; 7.2 · source: NVD
SA
Safari · Apple
1.0; 1.0 · source: NVD
TS
Turbolinux Server · Turbolinux
7.0; 8.0 · source: NVD
TW
Turbolinux Workstation · Turbolinux
7.0; 8.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-0370
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-0370
lists.grok.org.uk
http://lists.grok.org.uk/pipermail/full-disclosure/2003-May/004983.html
www.debian.org
http://www.debian.org/security/2003/dsa-361
Patch
http://www.kde.org/info/security/advisory-20030602-1.txt
Patch
http://www.redhat.com/support/errata/RHSA-2003-192.html
www.redhat.com
http://www.redhat.com/support/errata/RHSA-2003-193.html
Vendor Advisory
http://www.securityfocus.com/archive/1/320707
More from Safari
10.0
CVE-2025-24201
Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability
8.8
CVE-2025-43529
Apple Multiple Products Use-After-Free WebKit Vulnerability
8.8
CVE-2025-14174
Google Chromium Out of Bounds Memory Access Vulnerability
8.8
CVE-2023-43000
Apple Multiple products Use-After-Free Vulnerability
8.8
CVE-2025-31277
Apple Multiple Products Buffer Overflow Vulnerability