Lucene search

PRIOn knowledge basePRION:CVE-2011-3213

HistoryOct 14, 2011 - 10:55 a.m.

Code injection

2011-10-1410:55:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

Low

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

45.5%

JSON

The File Systems component in Apple Mac OS X before 10.7.2 does not properly track the specific X.509 certificate that a user manually accepted for an initial https WebDAV connection, which allows man-in-the-middle attackers to hijack WebDAV communication by presenting an arbitrary certificate for a subsequent connection.

CPENameOperatorVersion
mac_os_xeq10.5.8
mac_os_xeq10.4.3
mac_os_xeq10.6.8
mac_os_xeq10.2.5
mac_os_xeq10.6.7
mac_os_xeq10.2.7
mac_os_xeq10.0.2
mac_os_xeq10.2.8
mac_os_xeq10.2.1
mac_os_xeq10.5.6

Name	Operator	Version
mac_os_x	eq	10.5.8
mac_os_x	eq	10.4.3
mac_os_x	eq	10.6.8
mac_os_x	eq	10.2.5
mac_os_x	eq	10.6.7
mac_os_x	eq	10.2.7
mac_os_x	eq	10.0.2
mac_os_x	eq	10.2.8
mac_os_x	eq	10.2.1
mac_os_x	eq	10.5.6

Rows per page:

1-10 of 1361

References

lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html

support.apple.com/kb/HT5002

www.securityfocus.com/bid/50085

6.3 Medium

AI Score

Confidence

Low

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

45.5%

JSON

Related for PRION:CVE-2011-3213