CVE-2005-0237

Konqueror 3.2.1 - Domain Spoofing via Punycode Homograph Attack

Title source: llm

Description

The International Domain Name (IDN) support in Konqueror 3.2.1 on KDE 3.2.1 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.

References (12)

Core 12

Core References

Various Sources x_refsource_misc

http://www.shmoo.com/idn/homograph.txt

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/19236

Exploit, Vendor Advisory mailing-list x_refsource_fulldisc

http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html

Patch, Vendor Advisory x_refsource_confirm

http://www.kde.org/info/security/advisory-20050316-2.txt

Exploit x_refsource_misc

http://www.shmoo.com/idn

Vendor Advisory mailing-list x_refsource_fulldisc

http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031460.html

Third Party Advisory, VDB Entry vendor-advisory x_refsource_fedora

http://www.securityfocus.com/archive/1/427976/100/0/threaded

Vendor Advisory vendor-advisory x_refsource_mandrake

http://www.mandriva.com/security/advisories?name=MDKSA-2005:058

Patch, Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/14162

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2005-325.html

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10671

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/12461

Scores

EPSS 0.0103

EPSS Percentile 77.5%

Details

Status published

Products (2)

kde/kde 3.2.1

kde/konqueror 3.2.1

Published May 02, 2005

Tracked Since Feb 18, 2026