CVE-2009-2702

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2009-2702

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2009-2702.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2009-2702

Downstream

DSA-1916-1

Withdrawn

2024-06-30T15:58:22.993465Z

Published

2009-09-08T18:30:00Z

Modified

2024-06-04T04:00:19Z

Summary

[none]

Details

KDE KSSL in kdelibs 3.5.4, 4.2.4, and 4.3 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

References

Affected packages

Debian:10 / kde4libs

Package

Name: kde4libs
Purl: pkg:deb/debian/kde4libs?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4:4.3.2-1

Ecosystem specific

{
    "urgency": "low"
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2009-2702.json"