CVE-2003-0355

CVE-2003-0355 describes a vulnerability in Safari 1.0 Beta 2 and earlier, as well as affected versions of Konqueror, where the browser fails to validate the Common Name (CN) field in X.509 certificates. This flaw could enable remote attackers to spoof legitimate certificates, potentially misleading users about the authenticity of a website. The vulnerability has a CVSS score of 5.0, indicating a medium severity. It is easily exploitable over the network with low attack complexity, requiring no authentication, and primarily impacts availability (A:P) by allowing denial of service, though the description also points to spoofing. Despite its age, there is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. However, the CVE has garnered significant community discussion with 10 mentions, suggesting some level of awareness or interest.