JVNDB-2004-000592

[Japanese]
JVNDB-2004-000592
Shuriken Pro3 S/MIME signature verification does not verify the certificate authenticity
Overview
Shuriken Pro3 contains a vulnerability in the S/MIME signature verification where the authenticity of the certificate is not verified when verifying the S/MIME digital signature of an email message.
CVSS Severity (What is CVSS?)
Base Metrics: 5.0 (Medium) [IPA Score] Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None

Affected Products

JustSystems Corporation Shuriken Pro3 Shuriken Pro3 /R.2 Shuriken Pro3 Corporate Edition Shuriken Pro3 /R.2 [VeriSign Security Mail Set]

Impact
A user can not notice a forged message when it is signed with a malicious digital certificate, because the certificate authenticity is not verified.
Solution

Vendor Information
JustSystems Corporation Shuriken Support Desk : Shuriken Pro3 (Japanese)
CWE (What is CWE?)

CVE (What is CVE?)

References
JVN : JVN#B4BE09A4
Revision History
[2008/05/21] Web page published

Shuriken Pro3 S/MIME signature verification does not verify the certificate authenticity