Lucene search

[email protected]CVE-2010-1800

HistoryAug 25, 2010 - 8:00 p.m.

CVE-2010-1800

2010-08-2520:00:00

CWE-200

[email protected]

web.nvd.nist.gov

cve-2010-1800

cfnetwork

apple

mac os x

ssl

tls

man-in-the-middle

security vulnerability

5.6 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

45.6%

JSON

CFNetwork in Apple Mac OS X 10.6.3 and 10.6.4 supports anonymous SSL and TLS connections, which allows man-in-the-middle attackers to redirect a connection and obtain sensitive information via crafted responses.

CPENameOperatorVersion
apple:cfnetworkapple cfnetworkeq*
apple:mac_os_xapple mac os xeq10.6.3
apple:mac_os_xapple mac os xeq10.6.4
apple:mac_os_x_serverapple mac os x servereq10.6.3
apple:mac_os_x_serverapple mac os x servereq10.6.4

CPE	Name	Operator	Version
apple:cfnetwork	apple cfnetwork	eq	*
apple:mac_os_x	apple mac os x	eq	10.6.3
apple:mac_os_x	apple mac os x	eq	10.6.4
apple:mac_os_x_server	apple mac os x server	eq	10.6.3
apple:mac_os_x_server	apple mac os x server	eq	10.6.4

References

lists.apple.com/archives/security-announce/2010//Aug/msg00003.html

securitytracker.com/id?1024359

support.apple.com/kb/HT4312

5.6 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

45.6%

JSON

Related for CVE-2010-1800

prion1 nessus1