PT-2007-5838 · Apple · Cfnetwork+1

Marko Karppinen

+2

·

CVE-2007-4680

·

Publicado

2007-11-15

·

Atualizado

2017-07-29

CVSS v2.0

6.8

Média

VetorAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions: Apple Mac OS X versions 10.3.9 through 10.4.10
Description: The issue allows remote attackers to spoof trusted SSL certificates via a man-in-the-middle attack due to improper validation of certificates by CFNetwork.
Recommendations: For Apple Mac OS X versions 10.3.9 through 10.4.10, update to a version that properly validates certificates to prevent man-in-the-middle attacks.

Correção

Improper Authentication

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2007-4680

Produtos afetados

Cfnetwork
Macos X