Lucene search
RedhatCVE-2005-0236HistoryMay 02, 2005 - 4:00 a.m.
CVE-2005-0236
2005-05-0204:00:00
redhat
web.nvd.nist.gov
25
cve-2005-0236
international domain name
idn
omniweb 5
remote attackers
spoofing
punycode
ssl certificates
phishing attacks
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
7
Confidence
Low
EPSS
0.012
Percentile
85.8%
The International Domain Name (IDN) support in Omniweb 5 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.
Affected configurations
Node
omnigroupomniwebMatch5
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
7
Confidence
Low
EPSS
0.012
Percentile
85.8%
Related for CVE-2005-0236