CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-2809

Mozilla 1.9 M8 and earlier, Mozilla Firefox 2 before 2.0.0.15, SeaMonkey 1.1.5 and other versions before 1.1.10, Netscape 9.0, and other Mozilla-based web browsers, when a user accepts an SSL server certificate on the basis of the CN domain name in the DN field, regard the certificate as also accepted for all domain names in subjectAltName:dNSName fields, which makes it easier for remote attackers to trick a user into accepting an invalid certificate for a spoofed web site.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.02

EPSS Ranking 82.6%

CVSS Severity

CVSS v2 Score 4.0

References

Products affected by CVE-2008-2809

Mozilla » Firefox » Version: 2.0.0.1

cpe:2.3:a:mozilla:firefox:2.0.0.1
Mozilla » Firefox » Version: 2.0.0.10

cpe:2.3:a:mozilla:firefox:2.0.0.10
Mozilla » Firefox » Version: 2.0.0.11

cpe:2.3:a:mozilla:firefox:2.0.0.11
Mozilla » Firefox » Version: 2.0.0.12

cpe:2.3:a:mozilla:firefox:2.0.0.12
Mozilla » Firefox » Version: 2.0.0.13

cpe:2.3:a:mozilla:firefox:2.0.0.13
Mozilla » Firefox » Version: 2.0.0.14

cpe:2.3:a:mozilla:firefox:2.0.0.14
Mozilla » Firefox » Version: 2.0.0.2

cpe:2.3:a:mozilla:firefox:2.0.0.2
Mozilla » Firefox » Version: 2.0.0.3

cpe:2.3:a:mozilla:firefox:2.0.0.3
Mozilla » Firefox » Version: 2.0.0.4

cpe:2.3:a:mozilla:firefox:2.0.0.4
Mozilla » Firefox » Version: 2.0.0.5

cpe:2.3:a:mozilla:firefox:2.0.0.5
Mozilla » Firefox » Version: 2.0.0.6

cpe:2.3:a:mozilla:firefox:2.0.0.6
Mozilla » Firefox » Version: 2.0.0.7

cpe:2.3:a:mozilla:firefox:2.0.0.7
Mozilla » Firefox » Version: 2.0.0.8

cpe:2.3:a:mozilla:firefox:2.0.0.8
Mozilla » Firefox » Version: 2.0.0.9

cpe:2.3:a:mozilla:firefox:2.0.0.9
Mozilla » Geckb » Version: Any

cpe:2.3:a:mozilla:geckb:*
Mozilla » Seamonkey » Version: N/A

cpe:2.3:a:mozilla:seamonkey:-
Mozilla » Seamonkey » Version: 1.0

cpe:2.3:a:mozilla:seamonkey:1.0
Mozilla » Seamonkey » Version: 1.0.1

cpe:2.3:a:mozilla:seamonkey:1.0.1
Mozilla » Seamonkey » Version: 1.0.2

cpe:2.3:a:mozilla:seamonkey:1.0.2
Mozilla » Seamonkey » Version: 1.0.3

cpe:2.3:a:mozilla:seamonkey:1.0.3
Mozilla » Seamonkey » Version: 1.0.4

cpe:2.3:a:mozilla:seamonkey:1.0.4
Mozilla » Seamonkey » Version: 1.0.5

cpe:2.3:a:mozilla:seamonkey:1.0.5
Mozilla » Seamonkey » Version: 1.0.6

cpe:2.3:a:mozilla:seamonkey:1.0.6
Mozilla » Seamonkey » Version: 1.0.7

cpe:2.3:a:mozilla:seamonkey:1.0.7
Mozilla » Seamonkey » Version: 1.0.8

cpe:2.3:a:mozilla:seamonkey:1.0.8
Mozilla » Seamonkey » Version: 1.0.9

cpe:2.3:a:mozilla:seamonkey:1.0.9
Mozilla » Seamonkey » Version: 1.1.5

cpe:2.3:a:mozilla:seamonkey:1.1.5
Netscape » Navigator » Version: 9.0

cpe:2.3:a:netscape:navigator:9.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-2809

Products

Pricing

Contact Us