Konqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates via a man-in-the-middle attack.
Affected Platforms
Apple SafariKde KdeKde Konqueror EmbeddedTurbolinux Turbolinux ServerTurbolinux Turbolinux WorkstationRedhat Linux