← Retour aux CVEs

CVE-2005-0237

N/A

Description

The International Domain Name (IDN) support in Konqueror 3.2.1 on KDE 3.2.1 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.

Details CVE

Score CVSS v3.1N/A

Publie5/2/2005

Derniere modification4/16/2026

Sourcenvd

Observations honeypot0

Produits affectes

kde:kdekde:konqueror

References

http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html(secalert@redhat.com)

http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031460.html(secalert@redhat.com)

http://secunia.com/advisories/14162(secalert@redhat.com)

http://www.kde.org/info/security/advisory-20050316-2.txt(secalert@redhat.com)

http://www.mandriva.com/security/advisories?name=MDKSA-2005:058(secalert@redhat.com)

http://www.redhat.com/support/errata/RHSA-2005-325.html(secalert@redhat.com)

http://www.securityfocus.com/archive/1/427976/100/0/threaded(secalert@redhat.com)

http://www.securityfocus.com/bid/12461(secalert@redhat.com)

http://www.shmoo.com/idn(secalert@redhat.com)

http://www.shmoo.com/idn/homograph.txt(secalert@redhat.com)

https://exchange.xforce.ibmcloud.com/vulnerabilities/19236(secalert@redhat.com)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10671(secalert@redhat.com)

http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031460.html(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/14162(af854a3a-2127-422b-91ae-364da2661108)

http://www.kde.org/info/security/advisory-20050316-2.txt(af854a3a-2127-422b-91ae-364da2661108)

http://www.mandriva.com/security/advisories?name=MDKSA-2005:058(af854a3a-2127-422b-91ae-364da2661108)

http://www.redhat.com/support/errata/RHSA-2005-325.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/archive/1/427976/100/0/threaded(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/12461(af854a3a-2127-422b-91ae-364da2661108)

http://www.shmoo.com/idn(af854a3a-2127-422b-91ae-364da2661108)

http://www.shmoo.com/idn/homograph.txt(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/19236(af854a3a-2127-422b-91ae-364da2661108)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10671(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.