CVE:CVE-2002-0970
CNNVD:CNNVD-200209-034
KDE 3.0.2及其早期版本的Konqueror的SSL性能不能对intermediate CA-signed证书的基本限制查证。远程攻击者借助man-in-the-middle攻击欺骗受信任的站点证书。
solution:Upgrade kde konqueror to a higher version than 2.2.2,3.0,3.0.1,3.0.2,and avoid the version 2.2.2,3.0,3.0.1,3.0.2; Upgrade kde kde to a higher version than 2.2.2,3.0,3.0.1,3.0.2,and avoid the version 2.2.2,3.0,3.0.1,3.0.2