CVE-2004-0758 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2004-0758
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2004-0758

Description: Mozilla 1.5 through 1.7 allows a CA certificate to be imported even when their DN is the same as that of the built-in CA root certificate, which allows remote attackers to cause a denial of service to SSL pages because the malicious certificate is treated as invalid.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/16706 SUSE http://www.novell.com/linux/security/advisories/2004_36_mozilla.html SCO REDHAT http://www.redhat.com/support/errata/RHSA-2004-421.html OVAL http://oval.mitre.org/oval/definitions/data/oval3134.html GENTOO http://www.gentoo.org/security/en/glsa/glsa-200408-22.xml FEDORA http://marc.theaimsgroup.com/?l=bugtraq&m=109900315219363&w=2 CONFIRM http://bugzilla.mozilla.org/show_bug.cgi?id=249004 http://www.mozilla.org/projects/security/known-vulnerabilities.html CERT-VN 784278 BID 15495

Return to the previous page.