APPLE-SA-2013-03-14-1 OS X Mountain Lion v10.8.3 and Security Update 2013-001

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2013-03-14-1 OS X Mountain Lion v10.8.3 and Security Update 2013-001 OS X Mountain Lion v10.8.3 and Security Update 2013-001 is now available and addresses the following: Apache Available for: Mac OS X 10.6.8, Mac OS X Server 10.6.8, OS X Lio...

Apple iPhone/iPad/iPod touch iOS 6.1之前版本安全绕过漏洞

BUGTRAQ ID: 57598 CVECAN ID: CVE-2013-0963 Apple iOS是由苹果公司开发的操作系统。 Apple iOS内身份认证服务中存在错误处理。当用户的AppleID证书验证失败时，用户的AppleID会被假定为空字符串。当有多个属于不同用户的系统进入这种状态时，依靠该认证方式的应用程序就会产生认证错误。 0 Apple iPhone 4.x Apple iPhone 3.x Apple iOS 3.x Apple iOS 2.x Apple Apple TV 5.x Apple Apple TV 4.x 厂商补丁： Apple -----...

CVE-2013-0963

CVE-2013-0963 affects Apple iOS Identity Services. An error handling flaw causes an AppleID to be treated as the empty string if certificate validation fails, potentially allowing a physically proximate attacker to bypass authentication. Apple addressed this in iOS 6.1 (HT5642). Connected sources...