CVE-2011-0199 in Mac OS X
Zusammenfassung (Englisch)
The Certificate Trust Policy component in Apple Mac OS X before 10.6.8 does not perform CRL checking for Extended Validation (EV) certificates that lack OCSP URLs, which might allow man-in-the-middle attackers to spoof an SSL server via a revoked certificate.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservieren
23.12.2010
Veröffentlichung
24.06.2011
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 57768 | Apple Mac OS X Certificate Trust Policy schwache Authentisierung | 295 | Nicht definiert | Offizieller Fix | CVE-2011-0199 |