CVE-2003-0370: Apple Safari

High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days.

Konqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates via a man-in-the-middle attack.

Affected products

• Apple Safari: version 1.0 only
• Kde Kde: up to and including 2.2.2
• Kde Konqueror Embedded: version 0.1 only
• Red Hat Linux: version 7.1 only; version 7.2 only
• Turbolinux Turbolinux Server: version 7.0 only; version 8.0 only
• Turbolinux Turbolinux Workstation: version 7.0 only; version 8.0 only

Published 2003-06-16. Last modified 2026-06-16.