CVE-2011-3422

The Keychain implementation in Apple Mac OS X 10.6.8 and earlier does not properly handle an untrusted attribute of a Certification Authority certificate, which makes it easier for man-in-the-middle attackers to spoof arbitrary SSL servers via an Extended Validation certificate, as demonstrated b...

PT-2011-4447

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.6.8 and earlier Description The issue arises from the Keychain implementation not properly handling an untrusted attribute of a Certification Authority certificate. This makes it easier for man-in-the-middle attacker...

CVE-2011-3422: Improper Input Validation

The Keychain implementation in Apple Mac OS X 10.6.8 and earlier does not properly handle an untrusted attribute of a Certification Authority certificate, which makes it easier for man-in-the-middle attackers to spoof arbitrary SSL servers via an Extended Validation certificate, as demonstrated b...

Opera Extended Validation Information Disclosure Vulnerabilities - Mac OS X

Opera is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Opera Extended Validation Information Disclosure Vulnerabilities - Windows

Opera is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mac OS X Fraudulent DigiNotar Digital Certificates (Security Update 2011-005)

The remote host is running a version of Mac OS X 10.6 or 10.7 that does not have Security Update 2011-005 applied. Due to the issuance of several fraudulent SSL certificates, this security update removes DigiNotar from the list of trusted root certificates as well as the list of Extended Validati...

Opera Extended Validation Information Disclosure Vulnerabilities (Mac OS X)

The host is installed with Opera and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gboperaextentedvalidationinfodiscvulnmacosx.nasl 7044 2017-09-01 11:50:59Z teissa $ Opera Extended Validation Information Disclosure Vulnerabilities Mac OS X Authors: Rachana...

Apple Mac OS X Keychain证书设置安全限制绕过漏洞

BUGTRAQ ID: 49429 Mac OS X是苹果麦金塔Macintosh电脑之操作系统软件的总称。 Mac OS X在Keychain证书的设置上存在安全限制绕过漏洞，远程攻击者可利用此漏洞通过中间人攻击绕过Keychain安全设置。 即使用户已经把Keychain Access中的根CA信任设置标注为“Never Trust”，Mac OS X操作系统也会接受Extended Validation证书为有效。 Apple Mac OS X 10.6.x Apple MacOS X Server 10.6.x 厂商补丁： Apple -----...

CVE-2011-3388

Opera before 11.51 allows remote attackers to cause an insecure site to appear secure or trusted via unspecified actions related to Extended Validation and loading content from trusted sources in an unspecified sequence that causes the address field and page information dialog to contain security...

CVE-2011-3388

The CVE-2011-3388 issue affects Opera before 11.51, where Extended Validation/trusted sources handling could cause the address bar and page information dialog to display security info from a trusted site for an insecure site, potentially misleading users. This is an information-disclosure/trust-d...

CVE-2011-3388: Exposure of Sensitive Information to an Unauthorized Actor

Opera before 11.51 allows remote attackers to cause an insecure site to appear secure or trusted via unspecified actions related to Extended Validation and loading content from trusted sources in an unspecified sequence that causes the address field and page information dialog to contain security...

PT-2011-2179 · Apple · Macos X

Name of the Vulnerable Software and Affected Versions: Mac OS X versions prior to 10.6.8 Description: The issue concerns the Certificate Trust Policy component, which fails to perform CRL checking for Extended Validation EV certificates lacking OCSP URLs. This might allow man-in-the-middle...

CVE-2009-1682: Undefined Security Weakness

Apple Safari before 4.0 does not properly check for revoked Extended Validation EV certificates, which makes it easier for remote attackers to trick a user into accepting an invalid certificate...