Logo
›
›vulnerability›CVE-2005-0238
Name
CVE-2005-0238
Source
NVD ( link)Debian ( link)
Description
The International Domain Name (IDN) support in Epiphany allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.
CWEs
Published Date
Updated Date
Workaround
-
Advisories
http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.htmlExploit
http://www.securityfocus.com/bid/12461Broken Link
http://www.shmoo.com/idnBroken Link
http://www.shmoo.com/idn/homograph.txtBroken Link
https://bugzilla.redhat.com/beta/show_bug.cgi?id=147399Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/19236VDB Entry
http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.htmlExploit
http://www.securityfocus.com/bid/12461Broken Link
http://www.shmoo.com/idnBroken Link
http://www.shmoo.com/idn/homograph.txtBroken Link
https://bugzilla.redhat.com/beta/show_bug.cgi?id=147399Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/19236VDB Entry

Analysis#

Affected Component
Analysis
epiphany
Exploitable

Vulnerability Rating#

5
CVSSv2

Others affected components#

Name
Project
Project Version
Version
Status
epiphany
yocto
kirkstone
42.4
Exploitable
epiphany
yocto
scarthgap
46.0
Exploitable