Lucene search

[email protected]CVE-2005-0238

HistoryMay 02, 2005 - 4:00 a.m.

CVE-2005-0238

2005-05-0204:00:00

[email protected]

web.nvd.nist.gov

epiphany

international domain name

idn

spoofing

phishing

cve-2005-0238

ssl certificate

homograph characters

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

6.6 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.8%

JSON

The International Domain Name (IDN) support in Epiphany allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.

Affected configurations

NVD

Node

gnomeepiphany

mozillacaminoMatch0.8.5

mozillamozillaRange≤1.6

omnigroupomniwebMatch5

operaopera_browserRange≤7.54

CPENameOperatorVersion
gnome:epiphanygnome epiphanyeq*
mozilla:caminomozilla caminoeq0.8.5
mozilla:mozillamozillale1.6
omnigroup:omniwebomnigroup omniwebeq5
opera:opera_browseropera opera browserle7.54

CPE	Name	Operator	Version
gnome:epiphany	gnome epiphany	eq	*
mozilla:camino	mozilla camino	eq	0.8.5
mozilla:mozilla	mozilla	le	1.6
omnigroup:omniweb	omnigroup omniweb	eq	5
opera:opera_browser	opera opera browser	le	7.54

References

lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html

www.securityfocus.com/bid/12461

www.shmoo.com/idn

www.shmoo.com/idn/homograph.txt

bugzilla.redhat.com/beta/show_bug.cgi?id=147399

exchange.xforce.ibmcloud.com/vulnerabilities/19236

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

6.6 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.8%

JSON

Related for CVE-2005-0238

ubuntucve1 cvelist1 debiancve1 nvd1