Unscored CVE-2002-2125 EUVD-2002-2104GHSA-p57w-8x45-95g7

Internet Explorer 6.0 does not warn users when an expired certificate authority (CA) certificate is submitted to the user and a newer CA ce…

Published Nov 16, 2005 · Updated Sep 17, 2024 · Assigned by mitre

Description

Internet Explorer 6.0 does not warn users when an expired certificate authority (CA) certificate is submitted to the user and a newer CA certificate is in the user's local repository, which could allow remote attackers to decrypt web sessions via a man-in-the-middle (MITM) attack.

References

ie-ssl-certificate-expired(10180) vdb-entry
5778 vdb-entry
20020923 IE6 SSL Certificate Chain Verification mailing-list