CVE catalog

CVE-2003-0370

kdelibs, kdelibs-crypto - several vulnerabilities

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
2.06% · Oct 25, 2026

Konqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates via a man-in-the-middle attack. security flaw

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiankdelibs3.04:2.2.2-13.woody.8fixed
Debiankdelibs-crypto3.04:2.2.2-6woody2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiankdelibsdeb3.04:2.2.2-13.woody.8Not reportedDSA-361Not reported
Debiankdelibs-cryptodeb3.04:2.2.2-6woody2Not reportedDSA-361Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References