CVE-2011-3422

The Keychain implementation in Apple Mac OS X 10.6.8 and earlier does not properly handle an untrusted attribute of a Certification Authority certificate, which makes it easier for man-in-the-middle attackers to spoof arbitrary SSL servers via an Extended Validation certificate, as demonstrated b...

PT-2011-4447

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.6.8 and earlier Description The issue arises from the Keychain implementation not properly handling an untrusted attribute of a Certification Authority certificate. This makes it easier for man-in-the-middle attacker...

CVE-2011-3422: Improper Input Validation

The Keychain implementation in Apple Mac OS X 10.6.8 and earlier does not properly handle an untrusted attribute of a Certification Authority certificate, which makes it easier for man-in-the-middle attackers to spoof arbitrary SSL servers via an Extended Validation certificate, as demonstrated b...

Apple Removes DigiNotar Certificates From Safari

Apple has finally released a fix for the certificate trust issue caused by the attack on DigiNotar, more than a week after the fraudulent certificates were identified and other browser vendors moved to revoke trust in them. However, the company did not update the mobile version of Safari to remov...

Apple Mac OS X Keychain证书设置安全限制绕过漏洞

BUGTRAQ ID: 49429 Mac OS X是苹果麦金塔Macintosh电脑之操作系统软件的总称。 Mac OS X在Keychain证书的设置上存在安全限制绕过漏洞，远程攻击者可利用此漏洞通过中间人攻击绕过Keychain安全设置。 即使用户已经把Keychain Access中的根CA信任设置标注为“Never Trust”，Mac OS X操作系统也会接受Extended Validation证书为有效。 Apple Mac OS X 10.6.x Apple MacOS X Server 10.6.x 厂商补丁： Apple -----...

Opera Extended Validation Information Disclosure Vulnerabilities (Mac OS X)

The host is installed with Opera and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gboperaextentedvalidationinfodiscvulnmacosx.nasl 7044 2017-09-01 11:50:59Z teissa $ Opera Extended Validation Information Disclosure Vulnerabilities Mac OS X Authors: Rachana...

Opera Extended Validation Information Disclosure Vulnerabilities - Mac OS X

Opera is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mac OS X Fraudulent DigiNotar Digital Certificates (Security Update 2011-005)

The remote host is running a version of Mac OS X 10.6 or 10.7 that does not have Security Update 2011-005 applied. Due to the issuance of several fraudulent SSL certificates, this security update removes DigiNotar from the list of trusted root certificates as well as the list of Extended Validati...

Apple Mac OS X iWork 9.1 Update

This host is missing an important security update according to Mac OS X iWork 9.1 Update. OpenVAS Vulnerability Test $Id: gbmacosxiwork91upd.nasl 7024 2017-08-30 11:51:43Z teissa $ Apple Mac OS X iWork 9.1 Update Authors: Madhuri D Copyright: Copyright c 2011 Greenbone Networks GmbH,...

iWork Version Detection (Mac OS X)

This script finds the installed product version of iWork and sets the result in KB OpenVAS Vulnerability Test $Id: gbiworkdetectmacosx.nasl 6484 2017-06-29 09:15:46Z cfischer $ iWork Version Detection Mac OS X Authors: Madhuri D Copyright: Copyright c 2011 Greenbone Networks GmbH,...

Mac OS X v10.6.4 Multiple Vulnerabilities (2010-007)

This host is missing an important security update according to Mac OS X 10.6.5 Update/Mac OS X Security Update 2010-007 OpenVAS Vulnerability Test $Id: gbmacosxsu10-007.nasl 7052 2017-09-04 11:50:51Z teissa $ Mac OS X v10.6.4 Multiple Vulnerabilities 2010-007 Authors: Madhuri D Copyright: Copyrig...

Apple iWork Keynote Detection (Mac OS X SSH Login)

This script finds the installed product version of Apple iWork Keynote. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Chrome < 13.0.782.215 Multiple Vulnerabilities (Sep 2011) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apple Mac OS X iWork 9.1 Update

This host is missing an important security update according to Mac OS X iWork 9.1 Update. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Mac OS X v10.6.4 Multiple Vulnerabilities (2010-007)

This host is missing an important security update according to Mac OS X 10.6.5 Update/Mac OS X Security Update 2010-007 SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Adobe Air and Flash Player Multiple Vulnerabilities (Mac OS X)

This host is installed with Adobe Air and/or Flash Player and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodadobeprdtsmultvulnmacosx.nasl 7024 2017-08-30 11:51:43Z teissa $ Adobe Air and Flash Player Multiple Vulnerabilities Mac OS X Authors: Madhuri D Copyright:...

RealNetworks RealPlayer Multiple Vulnerabilities (Mac OS X)

This host is installed with RealPlayer which is prone to multiple vulnerabilities OpenVAS Vulnerability Test $Id: secpodrealplayermultvulnmacosx.nasl 7024 2017-08-30 11:51:43Z teissa $ RealNetworks RealPlayer Multiple Vulnerabilities Mac OS X Authors: Rachana Shetty Copyright: Copyright c 2011...

RealNetworks RealPlayer Detection (Mac OS X SSH Login)

Detects the installed version of RealPlayer on MAC. The script logs in via ssh, gets the version by using a command and set it in the KB item. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Adobe Air and Flash Player Multiple Vulnerabilities - Mac OS X

Adobe Air and/or Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RealNetworks RealPlayer Multiple Vulnerabilities - Mac OS X

RealPlayer is prone to multiple vulnerabilities SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...