CVE-2010-1800

CFNetwork in Apple Mac OS X 10.6.3 and 10.6.4 supports anonymous SSL and TLS connections, which allows man-in-the-middle attackers to redirect a connection and obtain sensitive information via crafted responses...

CVE-2010-1800

CVE-2010-1800 affects CFNetwork in Apple Mac OS X 10.6.3 and 10.6.4. It allows man-in-the-middle attackers to redirect connections and obtain sensitive information via crafted SSL/TLS responses due to support for anonymous connections. The root cause is the handling of anonymous SSL/TLS in CFNetw...