CVE-2011-3444 in Mac OS X

Riassunto

di MITRE

Address Book in Apple Mac OS X before 10.7.3 automatically switches to unencrypted sessions upon failure of encrypted connections, which allows remote attackers to read CardDAV data by terminating an encrypted connection and then sniffing the network.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Prenotare: 13/09/2011
• Divulgazione: 02/02/2012
• Moderazione: accettato
• Voce: VDB-60077
• CPE: pronto
• CWE: CWE-310 (confermato)
• CVSS: 4.3 (NVD)
• EPSS: 0.01424
• KEV: no
• Attività: molto basso
• Settore: Pharma, Government, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-3444
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-3444
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-3444/