CVE-2003-0370

Konqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates via a man-in-the-middle attack.

View graph Watch Export

CVSS v3.1

—

EPSS

2.06%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Connections

6 relationships

turbolinux workstation

source

Timeline

disclosure → media coverage

Jun 16, 2003

Disclosure — published as a CVE record. · last revised by NVD Apr 16, 2026