Create an account

Subscribe to LWN

LWN.net Weekly Edition for May 24, 2012

A uTouch architecture introduction

LWN.net Weekly Edition for May 17, 2012

Tasting the Ice Cream Sandwich

Highlights from the PostgreSQL 9.2 beta

Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

Inadequate digital certificate verification in Konqueror

Package(s):

Konqueror

CVE #(s):

Created:

August 19, 2002

Updated:

August 21, 2002

Description:

The Konqueror web browser, versions 3.0.2 and prior, does not properly check how digital certificates were signed; the result is that anybody can create fake certificates and use them for "man in the middle" attacks. The problem was fixed in Konqueror 3.0.3.

See also:

The KDE project's advisory on the problem.
LWN's article on the vulnerability and the fundamental insecurity of the digital certificate infrastructure.

Alerts:

Debian

2002-08-17

(Log in to post comments)

Copyright © 2012, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds