Mozilla 1.5 through 1.7 allows a CA certificate to be imported even when their DN is the same as that of the built-in CA root certificate, which allows remote attackers to cause a denial of service to SSL pages because the malicious certificate is treated as invalid.
References
Configurations
Information
Published : 2004-08-17 21:00
Updated : 2017-10-10 18:29
NVD link : CVE-2004-0758
Mitre link : CVE-2004-0758
JSON object : View
CWE
Products Affected
mozilla
- mozilla