PT-2005-1318 · Gnome+1 · Epiphany+1

Publicado 2005-02-07 · Atualizado 2022-02-28 · CVE-2005-0238

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Epiphany (affected versions not specified)

Description The issue allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates. This is done in a way that uses homograph characters from other character sets, which facilitates phishing attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2005-0238

Produtos afetados

Epiphany

Opera

Referências · 12

• 🔥 http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html · Exploit
• 🔥 http://shmoo.com/idn/homograph.txt · Exploit
• 🔥 http://shmoo.com/idn · Exploit
• http://securityfocus.com/bid/12461 · Nota
• http://xforce.iss.net/xforce/xfdb/19236 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-0238 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19236 · Nota
• https://bugzilla.redhat.com/beta/show_bug.cgi?id=147399 · Correção
• https://security-tracker.debian.org/tracker/CVE-2005-0238 · Aviso do Fabricante
• https://t.me/cvenotify/27486 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2005-0238 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2005-0238 · Aviso do Fabricante