Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:kdelibs:3.5.9:*:*:*:*:*:*:*

part: a version: 3.5.9 update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductKdelibs (eb40f386-b44a-53d6-b540-11e6d393c80e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/kde/kdelibs purl2cpe 2026-06-01 10:12:54.607181

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-1094 vulnerable 2026-06-08 04:57:55.675332 Details available
kio/kio/tcpslavebase.cpp in KDE KSSL in kdelibs before 4.6.1 does not properly verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a certificate issued by a legitimate Certification Authority for an IP address, a different vulnerability than CVE-2009-2702.
Published: 2011-03-16T22:00:00.000Z
Updated: 2024-08-06T22:14:27.786Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.