High 7.5Published Jun 16, 2003

CVE-2003-0370Konqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates via a man-in-the-middle atta…

Updated under an hour ago (Nov 2, 2026, 2:40 AM ET)

Does this affect you?

It affects apple safari and 5 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stackFree account, 3 products Every CVE for apple safari Exploited in the last 30 days

Konqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates via a man-in-the-middle attack.

CVSS: 7.5 HIGH (v2.0, NVD)AV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Not given
NVD analysis: Modified
Record last updated: Jun 16, 2026
First seen by InfoSec Signals: Nov 1, 2026

Affected products

Affected products

apple safari apple:safari	1.0; 1.0	NVD
kde konqueror_embedded kde:konqueror_embedded	0.1	NVD
kde kde kde:kde	through 2.2.2	NVD
redhat linux redhat:linux	7.1; 7.2	NVD
turbolinux turbolinux_server turbolinux:turbolinux_server	7.0; 8.0	NVD
turbolinux turbolinux_workstation turbolinux:turbolinux_workstation	7.0; 8.0	NVD

References

References

http://lists.grok.org.uk/pipermail/full-disclosure/2003-May/004983.html
http://www.debian.org/security/2003/dsa-361
http://www.kde.org/info/security/advisory-20030602-1.txt	patch, vendor-advisory
http://www.redhat.com/support/errata/RHSA-2003-192.html	patch, vendor-advisory
http://www.redhat.com/support/errata/RHSA-2003-193.html
http://www.securityfocus.com/archive/1/320707	vendor-advisory
http://www.securityfocus.com/bid/7520
http://www.turbolinux.com/security/TLSA-2003-36.txt

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.