Certificate Spoofing Vulnerability in Safari Browsers by Apple
CVE-2003-0355

Currently unrated

Key Information:

Vendor: Apple
Status: Safari; Konqueror Embedded
Vendor: CVE Published:; 9 June 2003

Summary

Safari 1.0 Beta 2 and earlier versions contain a vulnerability related to the improper validation of the Common Name (CN) field within X.509 Certificates. This flaw may allow remote attackers to spoof valid certificates, potentially leading to unauthorized access or the impersonation of trusted websites. Users of affected Safari versions are recommended to update their browsers or apply security measures to mitigate the risk of this vulnerability.

References

http://www.securityfocus.com/archive/1/320707

mailing-listx_refsource_BUGTRAQ

Timeline

Vulnerability Reserved
Oct 3, 2022
Vulnerability published
Jun 9, 2003