security flaw

The International Domain Name IDN support in Konqueror 3.2.1 on KDE 3.2.1 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing...

Multiple KDE Security Advisories (2005-03-16)

Three KDE security advisories have been issued today. KDE Security Advisory: Local DCOP denial of service vulnerability Original Release Date: 20050316 URL: http://www.kde.org/info/security/advisory-20050316-1.txt 0. References http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0396 1. System...

Mandrake Linux Security Advisory : kdelibs (MDKSA-2005:058)

A vulnerability in dcopserver was discovered by Sebastian Krahmer of the SUSE security team. A local user can lock up the dcopserver of other users on the same machine by stalling the DCOP authentication process, causing a local Denial of Service. dcopserver is the KDE Desktop Communication...

Internationalized Domain Name (IDN) homograph spoofing — Mozilla

Internationalized Domain Names IDN allow non-English speakers to use domains in their local language. Because many supported characters are similar to other if not identical in some fonts there is the possibility this could be used to construct perfect, indistinguishable phishing sites...

CVE-2005-0236

This CVE (CVE-2005-0236) applies to Omniweb 5’s International Domain Name (IDN) support. The vulnerability arises from how punycode-encoded domain names are decoded in URLs and SSL certificates, allowing homograph characters from other character sets to be used and potentially spoof trusted domai...

CVE-2005-0238

The International Domain Name IDN support in Epiphany allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks...

CVE-2005-0234

The CVE-2005-0234 issue affects Safari (IDN support) version 1.2.5, where punycode-encoded Internationalized Domain Names could be decoded in URLs and SSL certificates in a way that enables homograph-based domain spoofing. This could allow phishing by misleading users about the site they are visi...

CVE-2005-0236

The International Domain Name IDN support in Omniweb 5 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks...

CVE-2005-0237

The CVE-2005-0237 issue affects Konqueror 3.2.1 (KDE 3.2.1): IDN support allows spoofing of domain names using punycode/homograph characters in URLs and SSL certificates, enabling phishing. Mitigation is to install the KDE/kdelibs3 security updates referenced by multiple advisories (e.g., SUSE-SA...

CVE-2005-0238

CVE-2005-0238 concerns the International Domain Name (IDN) support in Epiphany, where punycode-encoded domain names decoded in URLs and SSL certificates can be interpreted using homograph characters from other scripts. This enables remote attackers to spoof legitimate domain names and facilitates...

CVE-2005-0234

The International Domain Name IDN support in Safari 1.2.5 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks...