Lucene search
MitreCVELIST:CVE-2011-3422HistorySep 10, 2011 - 12:00 a.m.
CVE-2011-3422
2011-09-1000:00:00
mitre
www.cve.org
4
The Keychain implementation in Apple Mac OS X 10.6.8 and earlier does not properly handle an untrusted attribute of a Certification Authority certificate, which makes it easier for man-in-the-middle attackers to spoof arbitrary SSL servers via an Extended Validation certificate, as demonstrated by https access with Safari.
References
lists.apple.com/archives/security-announce/2012/Feb/msg00000.html
support.apple.com/kb/HT5130
www.computerworld.com/s/article/9219669/Mac_OS_X_can_t_properly_revoke_dodgy_digital_certificates
www.securityfocus.com/bid/49429
www.securitytracker.com/id?1026002
exchange.xforce.ibmcloud.com/vulnerabilities/69556
Related
openvas
openvas
Apple Mac OS X Keychain Certificate Settings Security Bypass Vulnerability
2011-09-23 00:00:00
Apple Mac OS X Keychain Certificate Settings Security Bypass Vulnerability
2011-09-23 00:00:00
Mac OS X Multiple Vulnerabilities (2012-001)
2012-02-06 00:00:00
cve
cve
CVE-2011-3422
2011-09-12 12:40:44
nvd
nvd
CVE-2011-3422
2011-09-12 12:40:44
prion
prion
Design/Logic Flaw
2011-09-12 12:40:00
nessus
nessus
Mac OS X Multiple Vulnerabilities (Security Update 2012-001) (BEAST)
2012-02-02 00:00:00
Mac OS X 10.7.x < 10.7.3 Multiple Vulnerabilities (BEAST)
2012-02-02 00:00:00
securityvulns
securityvulns
Apple OS X multiple security vulnerabilities
2012-02-03 00:00:00
APPLE-SA-2012-02-01-1 OS X Lion v10.7.3 and Security Update 2012-001
2012-02-03 00:00:00