CVE-2003-0355

2022-10-0316:15:44

mitre

www.cve.org

safari

x.509 certificates

validation

spoofing

6.7 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

56.3%

JSON

Safari 1.0 Beta 2 (v73) and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates.

References

www.securityfocus.com/archive/1/320707