Details of VAR-200505-1101

ID

VAR-200505-1101

CVE

CVE-2005-0234

TITLE

Konqueror Vulnerable to international domain name spoofing vulnerability

Trust: 0.6

sources: CNNVD: CNNVD-200505-063

DESCRIPTION

The International Domain Name (IDN) support in Safari 1.2.5 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks. Multiple browsers are reported prone to vulnerabilities that surround the handling of International Domain Names. The vulnerabilities are caused by inconsistencies in how International Domain Names are processed. Reports indicate that attackers can leverage this to spoof address bars, status bars, and SSL certificate values. Remote attackers may exploit these vulnerabilities in phishing-style attacks. Through a false sense of trust, users may voluntarily disclose sensitive information to a malicious website. Although these vulnerabilities are reported to affect browsers, mail clients that depend on the browser to generate HTML code may also be affected. KDE is a free and open source X desktop management program for Linux and Unix workstations. Since version 3.2, KDE and its web browser Konqueror have supported International Domain Names (IDNs), which makes KDE vulnerable to a phishing technique called Homograph

Trust: 1.26

sources: NVD: CVE-2005-0234 // BID: 12461 // VULHUB: VHN-11443

AFFECTED PRODUCTS

vendor:	apple	model:	safari	scope:	eq	version:	1.2.5	Trust: 1.6
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.3.8	Trust: 0.3
vendor:	omni	model:	group omniweb	scope:	eq	version:	4.5	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	1.0	Trust: 0.3
vendor:	mozilla	model:	firefox	scope:	eq	version:	1.0	Trust: 0.3
vendor:	mozilla	model:	firefox	scope:	eq	version:	0.8	Trust: 0.3
vendor:	hp	model:	hp-ux b.11.22	scope:	-	version:	-	Trust: 0.3
vendor:	microsoft	model:	internet explorer sp2 do not use	scope:	ne	version:	6.0-	Trust: 0.3
vendor:	mozilla	model:	browser a	scope:	eq	version:	1.4	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.2.6	Trust: 0.3
vendor:	mozilla	model:	browser alpha	scope:	eq	version:	1.7	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.3.1	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.3	Trust: 0.3
vendor:	kde	model:	kde	scope:	eq	version:	3.3	Trust: 0.3
vendor:	kde	model:	konqueror	scope:	eq	version:	2.2.1	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.1	Trust: 0.3
vendor:	mozilla	model:	browser alpha	scope:	eq	version:	1.81	Trust: 0.3
vendor:	university	model:	of kansas lynx dev.4	scope:	ne	version:	2.8.5	Trust: 0.3
vendor:	mozilla	model:	browser	scope:	eq	version:	0.9.7	Trust: 0.3
vendor:	mozilla	model:	browser	scope:	eq	version:	1.4.1	Trust: 0.3
vendor:	opera	model:	software opera web browser win32 beta	scope:	eq	version:	7.01	Trust: 0.3
vendor:	mozilla	model:	browser rc1	scope:	eq	version:	1.0	Trust: 0.3
vendor:	microsoft	model:	internet explorer sp2	scope:	ne	version:	5.5	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.1.3	Trust: 0.3
vendor:	kde	model:	kde	scope:	eq	version:	3.2.1	Trust: 0.3
vendor:	s u s e	model:	linux personal	scope:	eq	version:	9.1	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.2.4	Trust: 0.3
vendor:	dillo	model:	web browser	scope:	ne	version:	0.6.6	Trust: 0.3
vendor:	mozilla	model:	browser	scope:	eq	version:	1.7.5	Trust: 0.3
vendor:	dillo	model:	web browser	scope:	ne	version:	0.2	Trust: 0.3
vendor:	kde	model:	konqueror	scope:	eq	version:	3.1.2	Trust: 0.3
vendor:	redhat	model:	enterprise linux es	scope:	eq	version:	2.1	Trust: 0.3
vendor:	mozilla	model:	browser alpha	scope:	eq	version:	1.84	Trust: 0.3
vendor:	mozilla	model:	thunderbird	scope:	eq	version:	0.7.3	Trust: 0.3
vendor:	mozilla	model:	camino	scope:	eq	version:	0.8	Trust: 0.3
vendor:	opera	model:	software opera web browser linux	scope:	eq	version:	6.0.1	Trust: 0.3
vendor:	kde	model:	konqueror	scope:	eq	version:	2.1.1	Trust: 0.3
vendor:	netscape	model:	netscape	scope:	eq	version:	7.1	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.3.8	Trust: 0.3
vendor:	redhat	model:	linux i686	scope:	eq	version:	7.3	Trust: 0.3
vendor:	dillo	model:	web browser	scope:	ne	version:	0.8	Trust: 0.3
vendor:	opera	model:	software opera web browser	scope:	eq	version:	7.22	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.1.1	Trust: 0.3
vendor:	mozilla	model:	browser	scope:	eq	version:	1.1	Trust: 0.3
vendor:	microsoft	model:	internet explorer sp1	scope:	ne	version:	5.0.1	Trust: 0.3
vendor:	netscape	model:	netscape	scope:	eq	version:	7.2	Trust: 0.3
vendor:	netscape	model:	netscape	scope:	ne	version:	8.0	Trust: 0.3
vendor:	mozilla	model:	browser	scope:	eq	version:	1.5	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	1.1	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.2.6	Trust: 0.3
vendor:	mozilla	model:	browser	scope:	eq	version:	0.9.5	Trust: 0.3
vendor:	mozilla	model:	browser m16	scope:	-	version:	-	Trust: 0.3
vendor:	s u s e	model:	linux personal	scope:	eq	version:	9.0	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.3	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.0.2	Trust: 0.3
vendor:	mozilla	model:	firefox	scope:	eq	version:	0.10.1	Trust: 0.3
vendor:	redhat	model:	enterprise linux as	scope:	eq	version:	3	Trust: 0.3
vendor:	mozilla	model:	browser	scope:	eq	version:	1.5.1	Trust: 0.3
vendor:	mozilla	model:	browser beta	scope:	eq	version:	1.7	Trust: 0.3
vendor:	kde	model:	konqueror	scope:	eq	version:	2.1.2	Trust: 0.3
vendor:	mozilla	model:	browser	scope:	eq	version:	1.0.1	Trust: 0.3
vendor:	opera	model:	software opera web browser mac	scope:	eq	version:	5.0	Trust: 0.3
vendor:	university	model:	of kansas lynx	scope:	ne	version:	2.8.1	Trust: 0.3
vendor:	omni	model:	group omniweb	scope:	eq	version:	5.0.1	Trust: 0.3
vendor:	kde	model:	kdelibs	scope:	eq	version:	3.3.1	Trust: 0.3
vendor:	mozilla	model:	browser	scope:	eq	version:	0.9.6	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.3.4	Trust: 0.3
vendor:	corestreet	model:	spoofstick	scope:	eq	version:	1.4	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.0	Trust: 0.3
vendor:	mozilla	model:	browser	scope:	eq	version:	0.9.48	Trust: 0.3
vendor:	mozilla	model:	browser	scope:	eq	version:	0.9.4.1	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.1.5	Trust: 0.3
vendor:	mozilla	model:	browser	scope:	eq	version:	1.0.2	Trust: 0.3
vendor:	suse	model:	linux enterprise server	scope:	eq	version:	9	Trust: 0.3
vendor:	opera	model:	software opera web browser win32	scope:	eq	version:	6.0	Trust: 0.3
vendor:	university	model:	of kansas lynx dev.8	scope:	ne	version:	2.8.5	Trust: 0.3
vendor:	dillo	model:	web browser	scope:	ne	version:	0.6	Trust: 0.3
vendor:	suse	model:	linux	scope:	eq	version:	8.0	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.1.1	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.2.5	Trust: 0.3
vendor:	opera	model:	software opera web browser b	scope:	eq	version:	7.11	Trust: 0.3
vendor:	redhat	model:	fedora core3	scope:	-	version:	-	Trust: 0.3
vendor:	university	model:	of kansas lynx dev.3	scope:	ne	version:	2.8.5	Trust: 0.3
vendor:	kde	model:	kde	scope:	eq	version:	3.2.2	Trust: 0.3
vendor:	kde	model:	konqueror	scope:	eq	version:	3.2.3	Trust: 0.3
vendor:	opera	model:	software opera web browser 1win32	scope:	eq	version:	7.0	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	1.2.3	Trust: 0.3
vendor:	mandriva	model:	linux mandrake	scope:	eq	version:	10.1	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.1.2	Trust: 0.3
vendor:	kde	model:	konqueror	scope:	eq	version:	2.2.2	Trust: 0.3
vendor:	s u s e	model:	linux personal	scope:	eq	version:	9.3	Trust: 0.3
vendor:	mozilla	model:	firefox	scope:	eq	version:	0.9.1	Trust: 0.3
vendor:	redhat	model:	advanced workstation for the itanium processor	scope:	eq	version:	2.1	Trust: 0.3
vendor:	mozilla	model:	browser	scope:	eq	version:	0.9.2	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.03	Trust: 0.3
vendor:	university	model:	of kansas lynx pre.5	scope:	ne	version:	2.8.3	Trust: 0.3
vendor:	university	model:	of kansas lynx dev.2	scope:	ne	version:	2.8.5	Trust: 0.3
vendor:	dillo	model:	web browser	scope:	ne	version:	0.6.3	Trust: 0.3
vendor:	suse	model:	linux i386	scope:	eq	version:	8.0	Trust: 0.3
vendor:	dillo	model:	web browser	scope:	ne	version:	0.7.3	Trust: 0.3
vendor:	dillo	model:	web browser	scope:	ne	version:	0.2.2	Trust: 0.3
vendor:	mozilla	model:	thunderbird	scope:	eq	version:	0.7.2	Trust: 0.3
vendor:	mozilla	model:	firefox	scope:	eq	version:	0.9.2	Trust: 0.3
vendor:	opera	model:	software opera web browser	scope:	eq	version:	7.23	Trust: 0.3
vendor:	opera	model:	software opera web browser j	scope:	eq	version:	7.11	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.0	Trust: 0.3
vendor:	opera	model:	software opera web browser	scope:	eq	version:	6.0	Trust: 0.3
vendor:	mozilla	model:	thunderbird	scope:	eq	version:	0.6	Trust: 0.3
vendor:	dillo	model:	web browser	scope:	ne	version:	0.5.1	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.1.5	Trust: 0.3
vendor:	opera	model:	software opera web browser win32	scope:	eq	version:	7.0	Trust: 0.3
vendor:	kde	model:	konqueror	scope:	eq	version:	3.3.2	Trust: 0.3
vendor:	dillo	model:	web browser	scope:	ne	version:	0.3.1	Trust: 0.3
vendor:	university	model:	of kansas lynx rel.1	scope:	ne	version:	2.8.3	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.2.3	Trust: 0.3
vendor:	kde	model:	kde	scope:	eq	version:	3.2.3	Trust: 0.3
vendor:	microsoft	model:	internet explorer	scope:	ne	version:	5.0.1	Trust: 0.3
vendor:	mozilla	model:	browser	scope:	eq	version:	0.9.8	Trust: 0.3
vendor:	opera	model:	software opera web browser win32	scope:	eq	version:	6.0.1	Trust: 0.3
vendor:	omni	model:	group omniweb	scope:	eq	version:	4.0.6	Trust: 0.3
vendor:	novell	model:	linux desktop	scope:	eq	version:	9	Trust: 0.3
vendor:	mandrakesoft	model:	corporate server x86 64	scope:	eq	version:	3.0	Trust: 0.3
vendor:	s u s e	model:	linux personal x86 64	scope:	eq	version:	9.1	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.2.5	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.0.1	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.3.2	Trust: 0.3
vendor:	opera	model:	software opera web browser	scope:	eq	version:	7.11	Trust: 0.3
vendor:	mozilla	model:	browser m15	scope:	-	version:	-	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.1.2	Trust: 0.3
vendor:	mozilla	model:	thunderbird	scope:	eq	version:	0.7	Trust: 0.3
vendor:	mozilla	model:	browser rc2	scope:	eq	version:	1.7	Trust: 0.3
vendor:	s u s e	model:	linux personal	scope:	eq	version:	9.2	Trust: 0.3
vendor:	opera	model:	software opera web browser	scope:	eq	version:	7.54	Trust: 0.3
vendor:	university	model:	of kansas lynx dev2x	scope:	ne	version:	2.8.3	Trust: 0.3
vendor:	opera	model:	software opera web browser	scope:	eq	version:	7.51	Trust: 0.3
vendor:	mozilla	model:	browser	scope:	eq	version:	0.9.4	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.2	Trust: 0.3
vendor:	microsoft	model:	internet explorer	scope:	ne	version:	5.0	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.0.3	Trust: 0.3
vendor:	netscape	model:	netscape	scope:	eq	version:	7.0	Trust: 0.3
vendor:	hp	model:	hp-ux b.11.11	scope:	-	version:	-	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.2.1	Trust: 0.3
vendor:	opera	model:	software opera web browser 3win32	scope:	eq	version:	7.0	Trust: 0.3
vendor:	mozilla	model:	browser	scope:	eq	version:	1.2.1	Trust: 0.3
vendor:	kde	model:	kde	scope:	eq	version:	3.3.2	Trust: 0.3
vendor:	mozilla	model:	firefox rc	scope:	eq	version:	0.9	Trust: 0.3
vendor:	redhat	model:	fedora core1	scope:	-	version:	-	Trust: 0.3
vendor:	opera	model:	software opera web browser win32	scope:	eq	version:	5.10	Trust: 0.3
vendor:	dillo	model:	web browser	scope:	ne	version:	0.8.1	Trust: 0.3
vendor:	dillo	model:	web browser	scope:	ne	version:	0.8.3	Trust: 0.3
vendor:	opera	model:	software opera web browser 2win32	scope:	eq	version:	7.0	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	1.2.1	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.1.4	Trust: 0.3
vendor:	mozilla	model:	browser	scope:	eq	version:	0.9.9	Trust: 0.3
vendor:	s u s e	model:	linux personal x86 64	scope:	eq	version:	9.0	Trust: 0.3
vendor:	university	model:	of kansas lynx	scope:	ne	version:	2.8.3	Trust: 0.3
vendor:	mandrakesoft	model:	corporate server	scope:	eq	version:	3.0	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.3.3	Trust: 0.3
vendor:	opera	model:	software opera web browser	scope:	eq	version:	7.10	Trust: 0.3
vendor:	opera	model:	software opera web browser	scope:	eq	version:	6.06	Trust: 0.3
vendor:	opera	model:	software opera web browser	scope:	eq	version:	6.0.1	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.2.3	Trust: 0.3
vendor:	alt	model:	linux alt linux compact	scope:	eq	version:	2.3	Trust: 0.3
vendor:	opera	model:	software opera web browser win32	scope:	eq	version:	6.0.4	Trust: 0.3
vendor:	opera	model:	software opera web browser win32	scope:	eq	version:	5.12	Trust: 0.3
vendor:	university	model:	of kansas lynx rel.1	scope:	ne	version:	2.8.2	Trust: 0.3
vendor:	microsoft	model:	internet explorer sp1	scope:	ne	version:	5.5	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.3.2	Trust: 0.3
vendor:	hp	model:	hp-ux b.11.23	scope:	-	version:	-	Trust: 0.3
vendor:	redhat	model:	enterprise linux ws	scope:	eq	version:	2.1	Trust: 0.3
vendor:	mozilla	model:	camino	scope:	eq	version:	0.7.0	Trust: 0.3
vendor:	apple	model:	safari beta	scope:	eq	version:	2	Trust: 0.3
vendor:	alt	model:	linux alt linux junior	scope:	eq	version:	2.3	Trust: 0.3
vendor:	opera	model:	software opera web browser linux	scope:	eq	version:	6.0.3	Trust: 0.3
vendor:	kde	model:	konqueror	scope:	eq	version:	3.0.1	Trust: 0.3
vendor:	mandriva	model:	linux mandrake amd64	scope:	eq	version:	10.0	Trust: 0.3
vendor:	dillo	model:	web browser	scope:	ne	version:	0.7.2	Trust: 0.3
vendor:	opera	model:	software opera web browser	scope:	eq	version:	7.20	Trust: 0.3
vendor:	redhat	model:	enterprise linux es	scope:	eq	version:	3	Trust: 0.3
vendor:	mozilla	model:	browser alpha	scope:	eq	version:	1.2	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.2	Trust: 0.3
vendor:	mozilla	model:	browser beta	scope:	eq	version:	1.2	Trust: 0.3
vendor:	opera	model:	software opera web browser win32	scope:	eq	version:	5.02	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.2.1	Trust: 0.3
vendor:	redhat	model:	linux	scope:	eq	version:	7.3	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.1.4	Trust: 0.3
vendor:	opera	model:	software opera web browser beta build	scope:	eq	version:	7.2012981	Trust: 0.3
vendor:	dillo	model:	web browser	scope:	ne	version:	0.3	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.3.7	Trust: 0.3
vendor:	s u s e	model:	linux personal x86 64	scope:	eq	version:	9.3	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.3.3	Trust: 0.3
vendor:	mozilla	model:	thunderbird	scope:	eq	version:	0.7.1	Trust: 0.3
vendor:	opera	model:	software opera web browser	scope:	eq	version:	5.12	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.3.5	Trust: 0.3
vendor:	dillo	model:	web browser	scope:	ne	version:	0.6.1	Trust: 0.3
vendor:	mozilla	model:	browser	scope:	eq	version:	0.9.2.1	Trust: 0.3
vendor:	verisign	model:	i-nav	scope:	-	version:	-	Trust: 0.3
vendor:	dillo	model:	web browser	scope:	ne	version:	0.7.1.2	Trust: 0.3
vendor:	dillo	model:	web browser	scope:	ne	version:	0.7	Trust: 0.3
vendor:	university	model:	of kansas lynx dev.5	scope:	ne	version:	2.8.5	Trust: 0.3
vendor:	mozilla	model:	browser	scope:	eq	version:	1.4.2	Trust: 0.3
vendor:	mozilla	model:	browser beta	scope:	eq	version:	1.1	Trust: 0.3
vendor:	opera	model:	software opera web browser	scope:	eq	version:	7.52	Trust: 0.3
vendor:	redhat	model:	enterprise linux as ia64	scope:	eq	version:	2.1	Trust: 0.3
vendor:	mozilla	model:	browser	scope:	eq	version:	0.8	Trust: 0.3
vendor:	redhat	model:	fedora core2	scope:	-	version:	-	Trust: 0.3
vendor:	kde	model:	konqueror	scope:	eq	version:	3.0.5	Trust: 0.3
vendor:	dillo	model:	web browser	scope:	ne	version:	0.6.4	Trust: 0.3
vendor:	opera	model:	software opera web browser win32	scope:	eq	version:	5.11	Trust: 0.3
vendor:	hp	model:	hp-ux b.11.00	scope:	-	version:	-	Trust: 0.3
vendor:	mozilla	model:	browser alpha	scope:	eq	version:	1.82	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.3.7	Trust: 0.3
vendor:	university	model:	of kansas lynx	scope:	ne	version:	2.8	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.2.8	Trust: 0.3
vendor:	s u s e	model:	linux personal x86 64	scope:	eq	version:	9.2	Trust: 0.3
vendor:	kde	model:	konqueror	scope:	eq	version:	3.3.1	Trust: 0.3
vendor:	university	model:	of kansas lynx	scope:	ne	version:	2.8.5	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.3.5	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.2.2	Trust: 0.3
vendor:	mozilla	model:	browser	scope:	eq	version:	1.2	Trust: 0.3
vendor:	microsoft	model:	internet explorer	scope:	ne	version:	5.5	Trust: 0.3
vendor:	mozilla	model:	browser	scope:	eq	version:	1.3.1	Trust: 0.3
vendor:	microsoft	model:	internet explorer sp2	scope:	ne	version:	5.0.1	Trust: 0.3
vendor:	mozilla	model:	browser	scope:	eq	version:	1.7	Trust: 0.3
vendor:	mozilla	model:	firefox	scope:	ne	version:	1.0.1	Trust: 0.3
vendor:	mozilla	model:	browser	scope:	eq	version:	1.6	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	1.2	Trust: 0.3
vendor:	kde	model:	konqueror	scope:	eq	version:	3.0.3	Trust: 0.3
vendor:	redhat	model:	enterprise linux es ia64	scope:	eq	version:	2.1	Trust: 0.3
vendor:	mandriva	model:	linux mandrake	scope:	eq	version:	10.0	Trust: 0.3
vendor:	redhat	model:	enterprise linux as	scope:	eq	version:	2.1	Trust: 0.3
vendor:	s u s e	model:	linux personal	scope:	eq	version:	8.2	Trust: 0.3
vendor:	mozilla	model:	browser alpha	scope:	eq	version:	1.83	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.0.4	Trust: 0.3
vendor:	opera	model:	software opera web browser win32 beta	scope:	eq	version:	7.02	Trust: 0.3
vendor:	redhat	model:	linux i386	scope:	eq	version:	9.0	Trust: 0.3
vendor:	university	model:	of kansas lynx rel.1	scope:	ne	version:	2.8.4	Trust: 0.3
vendor:	university	model:	of kansas lynx	scope:	ne	version:	2.7	Trust: 0.3
vendor:	microsoft	model:	internet explorer sp4	scope:	ne	version:	5.0.1	Trust: 0.3
vendor:	dillo	model:	web browser	scope:	ne	version:	0.2.4	Trust: 0.3
vendor:	mozilla	model:	browser rc2	scope:	eq	version:	1.0	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.3.4	Trust: 0.3
vendor:	opera	model:	software opera web browser win32	scope:	eq	version:	6.0.3	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.3.6	Trust: 0.3
vendor:	kde	model:	kde	scope:	eq	version:	3.3.1	Trust: 0.3
vendor:	mozilla	model:	browser	scope:	eq	version:	1.7.4	Trust: 0.3
vendor:	mozilla	model:	browser	scope:	eq	version:	1.4	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.2.7	Trust: 0.3
vendor:	mozilla	model:	firebird	scope:	eq	version:	0.5	Trust: 0.3
vendor:	dillo	model:	web browser	scope:	ne	version:	0.7.1	Trust: 0.3
vendor:	mozilla	model:	thunderbird	scope:	eq	version:	0.9	Trust: 0.3
vendor:	mozilla	model:	firefox	scope:	eq	version:	0.10	Trust: 0.3
vendor:	redhat	model:	enterprise linux ws ia64	scope:	eq	version:	2.1	Trust: 0.3
vendor:	mozilla	model:	browser	scope:	eq	version:	1.3	Trust: 0.3
vendor:	opera	model:	software opera web browser linux	scope:	eq	version:	6.10	Trust: 0.3
vendor:	dillo	model:	web browser	scope:	ne	version:	0.6.2	Trust: 0.3
vendor:	kde	model:	konqueror	scope:	eq	version:	3.0.2	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.2.8	Trust: 0.3
vendor:	opera	model:	software opera web browser win32	scope:	eq	version:	6.0.5	Trust: 0.3
vendor:	mozilla	model:	browser rc3	scope:	eq	version:	1.7	Trust: 0.3
vendor:	mozilla	model:	firebird	scope:	eq	version:	0.6.1	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.2.2	Trust: 0.3
vendor:	kde	model:	konqueror	scope:	eq	version:	3.0	Trust: 0.3
vendor:	kde	model:	kde	scope:	eq	version:	3.2	Trust: 0.3
vendor:	mozilla	model:	browser b	scope:	eq	version:	1.4	Trust: 0.3
vendor:	opera	model:	software opera web browser win32	scope:	eq	version:	6.0.2	Trust: 0.3
vendor:	dillo	model:	web browser	scope:	ne	version:	0.2.1	Trust: 0.3
vendor:	microsoft	model:	internet explorer sp3	scope:	ne	version:	5.0.1	Trust: 0.3
vendor:	mozilla	model:	firebird	scope:	eq	version:	0.7	Trust: 0.3
vendor:	dillo	model:	web browser	scope:	ne	version:	0.2.3	Trust: 0.3
vendor:	mozilla	model:	firefox preview release	scope:	-	version:	-	Trust: 0.3
vendor:	kde	model:	konqueror	scope:	eq	version:	3.1.1	Trust: 0.3
vendor:	sgi	model:	propack	scope:	eq	version:	3.0	Trust: 0.3
vendor:	suse	model:	linux	scope:	eq	version:	8.1	Trust: 0.3
vendor:	opera	model:	software opera web browser linux	scope:	eq	version:	5.0	Trust: 0.3
vendor:	omni	model:	group omniweb beta11	scope:	eq	version:	4.1	Trust: 0.3
vendor:	kde	model:	konqueror	scope:	eq	version:	3.1	Trust: 0.3
vendor:	mozilla	model:	browser	scope:	eq	version:	1.7.2	Trust: 0.3
vendor:	kde	model:	konqueror	scope:	eq	version:	3.1.3	Trust: 0.3
vendor:	kde	model:	konqueror	scope:	eq	version:	3.2.2-6	Trust: 0.3
vendor:	kde	model:	kde	scope:	ne	version:	3.4	Trust: 0.3
vendor:	mozilla	model:	browser rc1	scope:	eq	version:	1.7	Trust: 0.3
vendor:	redhat	model:	advanced workstation for the itanium processor ia64	scope:	eq	version:	2.1	Trust: 0.3
vendor:	microsoft	model:	internet explorer	scope:	ne	version:	6.0	Trust: 0.3
vendor:	university	model:	of kansas lynx	scope:	ne	version:	2.8.4	Trust: 0.3
vendor:	kde	model:	konqueror b	scope:	eq	version:	3.0.5	Trust: 0.3
vendor:	gentoo	model:	linux	scope:	-	version:	-	Trust: 0.3
vendor:	redhat	model:	linux i386	scope:	eq	version:	7.3	Trust: 0.3
vendor:	opera	model:	software opera web browser linux	scope:	eq	version:	6.0.2	Trust: 0.3
vendor:	dillo	model:	web browser	scope:	ne	version:	0.4	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.3.6	Trust: 0.3
vendor:	mozilla	model:	thunderbird	scope:	eq	version:	1.0	Trust: 0.3
vendor:	mozilla	model:	firefox	scope:	eq	version:	0.9	Trust: 0.3
vendor:	mozilla	model:	thunderbird	scope:	eq	version:	0.8	Trust: 0.3
vendor:	dillo	model:	web browser	scope:	ne	version:	0.8.2	Trust: 0.3
vendor:	opera	model:	software opera web browser .6win32	scope:	eq	version:	6.0	Trust: 0.3
vendor:	kde	model:	konqueror	scope:	eq	version:	3.1.4	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.2.7	Trust: 0.3
vendor:	mandriva	model:	linux mandrake x86 64	scope:	eq	version:	10.1	Trust: 0.3
vendor:	mozilla	model:	browser	scope:	eq	version:	1.7.3	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.3.1	Trust: 0.3
vendor:	university	model:	of kansas lynx dev.22	scope:	ne	version:	2.8.3	Trust: 0.3
vendor:	opera	model:	software opera web browser	scope:	eq	version:	7.53	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.1	Trust: 0.3
vendor:	kde	model:	konqueror	scope:	eq	version:	3.1.5	Trust: 0.3
vendor:	mozilla	model:	browser	scope:	eq	version:	0.9.3	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	1.2.2	Trust: 0.3
vendor:	redhat	model:	enterprise linux ws	scope:	eq	version:	3	Trust: 0.3
vendor:	opera	model:	software opera web browser	scope:	eq	version:	7.21	Trust: 0.3
vendor:	redhat	model:	desktop	scope:	eq	version:	3.0	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.1.3	Trust: 0.3
vendor:	mozilla	model:	browser	scope:	eq	version:	0.9.35	Trust: 0.3
vendor:	mozilla	model:	browser	scope:	eq	version:	1.7.1	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.2.4	Trust: 0.3
vendor:	kde	model:	konqueror	scope:	eq	version:	3.3	Trust: 0.3
vendor:	mozilla	model:	browser alpha	scope:	eq	version:	1.1	Trust: 0.3
vendor:	mozilla	model:	firefox	scope:	eq	version:	0.9.3	Trust: 0.3
vendor:	dillo	model:	web browser	scope:	ne	version:	0.6.5	Trust: 0.3
vendor:	opera	model:	software opera web browser	scope:	eq	version:	7.50	Trust: 0.3
vendor:	microsoft	model:	internet explorer sp1	scope:	ne	version:	6.0	Trust: 0.3
vendor:	kde	model:	konqueror	scope:	eq	version:	3.2.1	Trust: 0.3
vendor:	mozilla	model:	browser	scope:	eq	version:	1.0	Trust: 0.3

sources: BID: 12461 // CNNVD: CNNVD-200505-063 // NVD: CVE-2005-0234

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2005-0234
value:	MEDIUM
Trust: 1.0
CNNVD:	CNNVD-200505-063
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-11443
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2005-0234
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:P/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.0
VULHUB:	VHN-11443
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:P/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-11443 // CNNVD: CNNVD-200505-063 // NVD: CVE-2005-0234

PROBLEMTYPE DATA

problemtype:

NVD-CWE-Other

Trust: 1.0

sources: NVD: CVE-2005-0234

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-200505-063

TYPE

Design Error

Trust: 0.9

sources: BID: 12461 // CNNVD: CNNVD-200505-063

EXTERNAL IDS

db:	BID	id:	12461	Trust: 2.0
db:	NVD	id:	CVE-2005-0234	Trust: 2.0
db:	CNNVD	id:	CNNVD-200505-063	Trust: 0.7
db:	XF	id:	19236	Trust: 0.6
db:	APPLE	id:	APPLE-SA-2005-03-21	Trust: 0.6
db:	BUGTRAQ	id:	20050208 INTERNATIONAL DOMAIN NAME [IDN] SUPPORT IN MODERN BROWSERS ALLOWS ATTACKERS TO SPOOF DOMAIN NAME URLS + SSL CERTS.	Trust: 0.6
db:	FULLDISC	id:	20050206 STATE OF HOMOGRAPH ATTACKS	Trust: 0.6
db:	VULHUB	id:	VHN-11443	Trust: 0.1

sources: VULHUB: VHN-11443 // BID: 12461 // CNNVD: CNNVD-200505-063 // NVD: CVE-2005-0234

REFERENCES

url:	http://www.shmoo.com/idn/homograph.txt	Trust: 2.0
url:	http://lists.apple.com/archives/security-announce/2005/mar/msg00000.html	Trust: 1.7
url:	http://www.securityfocus.com/bid/12461	Trust: 1.7
url:	http://lists.grok.org.uk/pipermail/full-disclosure/2005-february/031459.html	Trust: 1.7
url:	http://www.shmoo.com/idn	Trust: 1.7
url:	https://exchange.xforce.ibmcloud.com/vulnerabilities/19236	Trust: 1.1
url:	http://marc.info/?l=bugtraq&m=110782704923280&w=2	Trust: 1.0
url:	http://xforce.iss.net/xforce/xfdb/19236	Trust: 0.6
url:	http://marc.theaimsgroup.com/?l=bugtraq&m=110782704923280&w=2	Trust: 0.6
url:	http://lists.altlinux.ru/pipermail/security-announce/2005-march/000287.html	Trust: 0.3
url:	http://www.kde.org/info/security/advisory-20050316-2.txt	Trust: 0.3
url:	http://docs.info.apple.com/article.html?artnum=301061	Trust: 0.3
url:	http://www.mozilla.org/products/firefox/releases/	Trust: 0.3
url:	http://www.mozilla.org/	Trust: 0.3
url:	http://rhn.redhat.com/errata/rhsa-2005-325.html	Trust: 0.3
url:	http://rhn.redhat.com/errata/rhsa-2005-384.html	Trust: 0.3
url:	http://www.apple.com/safari/	Trust: 0.3
url:	http://browser.netscape.com/ns8/security/alerts.jsp	Trust: 0.3
url:	http://www.corestreet.com/spoofstick/	Trust: 0.3
url:	http://slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.000123	Trust: 0.3
url:	/archive/1/389803	Trust: 0.3
url:	/archive/1/389822	Trust: 0.3
url:	/archive/1/389695	Trust: 0.3
url:	/archive/1/389858	Trust: 0.3
url:	/archive/1/389961	Trust: 0.3
url:	http://marc.info/?l=bugtraq&m=110782704923280&w=2	Trust: 0.1

sources: VULHUB: VHN-11443 // BID: 12461 // CNNVD: CNNVD-200505-063 // NVD: CVE-2005-0234

CREDITS

Waldo Bastian bastian@kde.org

Trust: 0.6

sources: CNNVD: CNNVD-200505-063

SOURCES

db:	VULHUB	id:	VHN-11443
db:	BID	id:	12461
db:	CNNVD	id:	CNNVD-200505-063
db:	NVD	id:	CVE-2005-0234

LAST UPDATE DATE

2024-08-14T13:05:43.388000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-11443	date:	2017-07-11T00:00:00
db:	BID	id:	12461	date:	2007-03-02T19:55:00
db:	CNNVD	id:	CNNVD-200505-063	date:	2005-10-20T00:00:00
db:	NVD	id:	CVE-2005-0234	date:	2017-07-11T01:32:09.467

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-11443	date:	2005-05-02T00:00:00
db:	BID	id:	12461	date:	2005-02-07T00:00:00
db:	CNNVD	id:	CNNVD-200505-063	date:	2005-03-17T00:00:00
db:	NVD	id:	CVE-2005-0234	date:	2005-05-02T04:00:00