CVE-2014-3568 in Apple Xcodeinfo

Summary

OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j does not properly enforce the no-ssl3 build option, which allows remote attackers to bypass intended access restrictions via an SSL 3.0 handshake, related to s23_clnt.c and s23_srvr.c.

Reservation

05/14/2014

Disclosure

10/18/2014

Entries

VulDB provides additional information and datapoints for this CVE:

IDVulnerabilityCWEExpCouCVE
77872Apple Xcode IDE Xcode Server cryptographic issue310Not definedOfficial fixCVE-2014-3568
68907Apple Mac OS X cryptographic issue310Not definedOfficial fixCVE-2014-3568
67992OpenSSL no-sslv3 cryptographic issue310UnprovenOfficial fixCVE-2014-3568

Description

CPE

CWE

CVSS

Exploits

History

Diff

Relate

Threat Intelligence

API JSON

API XML

API CSV

◂ PreviousOverviewNext ▸

Do you know our Splunk app?

Download it now for free!