TWSL2011-007_iOS_code_workaround

= testcert TWSL2011-007 취약점 완화일명 CVE-2011-0228를 위한 참조 구현입니다. 저자: Eric Monti 날짜: 2011년 7월 28일 = 컴파일 Apple iOS SDK CFLAGS와 함께 다음과 같이 컴파일하세요: gcc -o testcert testcert.m -framework Foundation -framework Security 위 컴파일 인자는 단지 확인만 해보려는 경우 OS X에서 그대로 동작할 것입니다. = 사용법: root@kitploit: $ testcert...

isslfix

iOS : iSSLFix: Certificate 1BDC0A9E-7F...

CVE-2011-0228

Affected software: Apple iOS prior to 4.2.10 and 4.3.x prior to 4.3.5. Vulnerability: The Data Security component does not check the basicConstraints parameter when validating X.509 certificate chains, allowing a non-CA certificate to sign a certificate for any domain. This enables a man-in-the-m...

TWSL2011-007: iOS SSL Implementation Does Not Validate Certificate Chain

Trustwave's SpiderLabs Security Advisory TWSL2011-007: iOS SSL Implementation Does Not Validate Certificate Chain https://www.trustwave.com/spiderlabs/advisories/TWSL2011-007.txt Published: 2011-07-25 Version: 1.0 Vendor: Apple http://www.apple.com Product: iOS Version affected: Versions Prior to...

APPLE-SA-2011-07-25-2 iOS 4.2.10 Software Update for iPhone

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2011-07-25-2 iOS 4.2.10 Software Update for iPhone iOS 4.2.10 Software Update for iPhone is now available and addresses the following: Data Security Available for: iOS 4.2.5 through 4.2.9 for iPhone 4 CDMA Impact: An attacker with a privilege...