Lucene search
RootSSV:60296HistoryJul 27, 2012 - 12:00 a.m.
Apple XCode 4.x 信息泄露漏洞
2012-07-2700:00:00
Root
www.seebug.org
21
0.003 Low
EPSS
Percentile
66.1%
BUGTRAQ ID: 54679
CVE ID: CVE-2012-3698,CVE-2011-3389
Xcode是苹果机器上所使用的开发工具。
Apple Xcode 4.4之前版本在实现上存在安全漏洞，可被恶意用户利用泄露敏感信息，劫持用户会话，绕过某些安全限制。
1） SSL 3.0和TLS 1.0协议的实现中存在设计错误。
2） DR实现中的错误可允许App Store应用访问用Xcode构建的Helper工具中的密钥链项目。
0
Apple XCode 4.x
厂商补丁：
Apple
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
Related
nessus
nessus
Apple Xcode < 4.4 Multiple Vulnerabilities (Mac OS X) (BEAST)
2012-08-03 00:00:00
Kerio Connect < 8.1.0 SSL/TLS Information Disclosure (BEAST)
2014-02-07 00:00:00
cve
cve
prion
prion
Code injection
2012-07-26 19:55:00
Session fixation
2011-09-06 19:55:00
fedora
fedora
[SECURITY] Fedora 15 Update: nss-util-3.13.1-3.fc15
2012-01-22 05:26:28
[SECURITY] Fedora 15 Update: xulrunner-9.0.1-1.fc15
2012-01-22 05:26:29
[SECURITY] Fedora 15 Update: nspr-4.8.9-2.fc15
2012-01-22 05:26:29
checkpoint_security
checkpoint_security
Check Point response to CVE-2011-3389 aka BEAST attack
2012-10-15 22:00:00
openvas
openvas
Fedora Update for thunderbird-lightning FEDORA-2011-17399
2012-01-23 00:00:00
Fedora Update for firefox FEDORA-2011-17399
2012-01-23 00:00:00
Fedora Update for firefox FEDORA-2011-17400
2012-04-02 00:00:00
ibm
ibm
cert
cert
SSL 3.0 and TLS 1.0 allow chosen plaintext attack in CBC modes
2011-09-27 00:00:00
veracode
veracode
Man-in-the-Middle (MitM)
2019-05-02 04:55:58
Blockwise Chosen-boundary Attacks
2017-04-27 06:38:37
mskb
mskb
debiancve
debiancve
CVE-2011-3389
2011-09-06 19:55:00
checkpoint_advisories
checkpoint_advisories
seebug
seebug
Microsoft Windows SSL/TLS信息泄露漏洞
2011-09-29 00:00:00
ics
ics
Siemens Ruggedcom WIN Products BEAST Attack Vulnerability
2018-09-06 12:00:00
Siemens SIMATIC RF6XXR
2019-07-11 12:00:00
securityvulns
securityvulns
ESA-2012-032: RSA BSAFE® Micro Edition Suite Security Update for BEAST (Browser Exploit Against SSL/TLS) attacks
2014-05-05 00:00:00
ESA-2012-032: RSA BSAFE(r) Micro Edition Suite Security Update for BEAST (Browser Exploit Against SSL/TLS) attacks
2012-10-29 00:00:00
lighthttpd security vulnerabilities
2012-01-02 00:00:00
debian
debian
[SECURITY] [DSA 2398-2] curl regression
2012-03-31 19:38:57
[SECURITY] [DSA 2368-1] lighttpd security update
2011-12-21 00:24:51
[SECURITY] [DSA 2398-1] curl security update
2012-01-30 19:49:07
freebsd
freebsd
fetchmail -- chosen plaintext attack against SSL CBC initialization vectors
2012-01-19 00:00:00
asterisk -- Multiple vulnerabilities
2016-02-03 00:00:00
ubuntucve
ubuntucve
CVE-2011-3389
2011-11-16 00:00:00
rubygems
rubygems
f5
f5
osv
osv
curl - several
2012-03-31 00:00:00
lighttpd - several
2011-12-20 00:00:00
nss - security update
2015-02-16 00:00:00
rapid7blog
rapid7blog
gentoo
gentoo
cURL: Multiple vulnerabilities
2012-03-06 00:00:00