PT-2005-1318 · Gnome+1 · Epiphany+1

Published 2005-02-07 · Updated 2022-02-28 · CVE-2005-0238

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Epiphany (affected versions not specified)

Description The issue allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates. This is done in a way that uses homograph characters from other character sets, which facilitates phishing attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2005-0238

Affected Products

Epiphany

Opera

References · 12

• 🔥 http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html · Exploit
• 🔥 http://shmoo.com/idn/homograph.txt · Exploit
• 🔥 http://shmoo.com/idn · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-0238 · Vendor Advisory
• https://bugzilla.redhat.com/beta/show_bug.cgi?id=147399 · Patch
• https://security-tracker.debian.org/tracker/CVE-2005-0238 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0238 · Security Note
• https://osv.dev/vulnerability/CVE-2005-0238 · Vendor Advisory
• http://securityfocus.com/bid/12461 · Note
• http://xforce.iss.net/xforce/xfdb/19236 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19236 · Note
• https://t.me/cvenotify/27486 · Telegram Post