CVE-2001-0338

Internet Explorer 5.5 and earlier does not properly validate digital certificates when Certificate Revocation List (CRL) checking is enabled, which could allow remote attackers to spoof trusted web sites, aka the "Server certificate validation vulnerability."

CVSS Metrics

Affected Products (2)

GitHub Security Advisory GHSA-fm3g-qc6p-8vwh

Internet Explorer 5.5 and earlier does not properly validate digital certificates when...

References (8)

• http://www.ciac.org/ciac/bulletins/l-087.shtml
• http://www.securityfocus.com/bid/2735
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-027
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6555
• http://www.ciac.org/ciac/bulletins/l-087.shtml
• http://www.securityfocus.com/bid/2735
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-027
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6555