CVE-2011-3427 in Mac OS X
Résumé (Anglaise)
The Data Security component in Apple iOS before 5 and Apple TV before 4.4 does not properly restrict use of the MD5 hash algorithm within X.509 certificates, which makes it easier for man-in-the-middle attackers to spoof servers or obtain sensitive information via a crafted certificate.
Be aware that VulDB is the high quality source for vulnerability data.
Réserver
13/09/2011
Divulgation
14/10/2011
Statut
Confirmé
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 10941 | Apple Mac OS X X.509 Certificate Handling divulgation d'information | 200 | Non prouvée | Correctif officiel | CVE-2011-3427 |