VDB
CVE-2004-0758
CVE-2004-0758
PUBLISHED
CVSS 5 MEDIUM
Mozilla 1.5 through 1.7 allows a CA certificate to be imported even when their DN is the same as that of the built-in CA root certificate, which allows remote attackers to cause a denial of service to SSL pages because the malicious certificate is treated as invalid.
EPSS 3.15% · 87.5th percentile
Risk Scores
CVSS 2.0
5
EPSS Score
3.15%
87.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| mozilla | mozilla | |
| n/a | n/a | n/a |
Timeline
- Aug 3, 2004 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Oct 28, 2022 EPSS Score
- Feb 11, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 4, 2023 EPSS Score
- Jul 11, 2023 EPSS Score
- Jul 19, 2023 EPSS Score
- Sep 10, 2023 EPSS Score
References
- RHSA-2004:421 vendor-advisory
- oval:org.mitre.oval:def:10304 vdb
- VU#784278 third-party-advisory
- http://www.gentoo.org/security/en/glsa/glsa-200408-22.xml technical
- http://www.mozilla.org/projects/security/known-vulnerabilities.html technical
- http://www.novell.com/linux/security/advisories/2004_36_mozilla.html technical
- ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt technical
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127186 technical
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3134 technical
- https://nvd.nist.gov/vuln/detail/CVE-2004-0758 advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16706 url
- http://bugzilla.mozilla.org/show_bug.cgi?id=249004 url
- http://marc.info/?l=bugtraq&m=109900315219363&w=2 url
- http://www.securityfocus.com/bid/15495 url