CVEvulnerability
CVE-2001-0338
5.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2001-06-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.1 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:P
Description
Internet Explorer 5.5 and earlier does not properly validate digital certificates when Certificate Revocation List (CRL) checking is enabled, which could allow remote attackers to spoof trusted web sites, aka the "Server certificate validation vulnerability."
Affected configurations
• microsoft internet explorer (<= 5.5)
• microsoft internet explorer 5.01
References
- http://www.ciac.org/ciac/bulletins/l-087.shtml www.ciac.org
- http://www.securityfocus.com/bid/2735 www.securityfocus.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-027 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6555 exchange.xforce.ibmcloud.com
- http://www.ciac.org/ciac/bulletins/l-087.shtml www.ciac.org
- http://www.securityfocus.com/bid/2735 www.securityfocus.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-027 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6555 exchange.xforce.ibmcloud.com