Lucene search

K
freebsdFreeBSD5360A659-131C-11D9-BC4A-000C41E2CDAD
HistoryFeb 12, 2004 - 12:00 a.m.

mozilla -- hostname spoofing bug

2004-02-1200:00:00
vuxml.freebsd.org
10

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

72.8%

When processing URIs that contain an unqualified host name–
specifically, a domain name of only one component–
Mozilla will perform matching against the first component
of the domain name in SSL certificates. In other words, in
some situations, a certificate issued to “www.example.com
will be accepted as matching “www”.

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

72.8%

Related for 5360A659-131C-11D9-BC4A-000C41E2CDAD