Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2005-0238

Date: February 7, 2005

The International Domain Name (IDN) support in Epiphany allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.

Severity Score

Related Resources (9)

https://exchange.xforce.ibmcloud.com/vulnerabilities/19236
https://bugzilla.redhat.com/beta/show_bug.cgi?id=147399
https://nvd.nist.gov/vuln/detail/CVE-2005-0238
http://www.shmoo.com/idn
https://people.canonical.com/~ubuntu-security/cve/CVE-2005-0238
http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html
http://www.shmoo.com/idn/homograph.txt
http://www.securityfocus.com/bid/12461
https://www.mend.io/vulnerability-database/CVE-2005-0238

Severity Score

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): LOW
Availability (A): NONE

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): LOW
Authentication (AU): NONE
Confidentiality (C): NONE
Integrity (I): PARTIAL
Availability (A): NONE
Additional information:

Do you need more information?

Contact Us