Create an account

Subscribe to LWN

Vyatta – Linux & Open Source Alternative to Cisco – Advanced Routing, Firewall, VPN, QoS..
Free Download ->

LK2008: The values of the Linux community

LWN.net Weekly Edition for October 9, 2008

Plugging into GCC

LWN.net Weekly Edition for October 2, 2008

Ubuntu debuts its Upstream Report

Weekly edition	Kernel	Security	Distributions	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ

Inadequate digital certificate verification in Konqueror

Package(s):

Konqueror

CVE #(s):

Created:

August 19, 2002

Updated:

August 21, 2002

Description:

The Konqueror web browser, versions 3.0.2 and prior, does not properly check how digital certificates were signed; the result is that anybody can create fake certificates and use them for "man in the middle" attacks. The problem was fixed in Konqueror 3.0.3.

See also:

The KDE project's advisory on the problem.
LWN's article on the vulnerability and the fundamental insecurity of the digital certificate infrastructure.

Alerts:

Debian

2002-08-17

(Log in to post comments)

Copyright © 2008, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds