CVE-2014-3568 in Apple Xcode

摘要 (英语)

OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j does not properly enforce the no-ssl3 build option, which allows remote attackers to bypass intended access restrictions via an SSL 3.0 handshake, related to s23_clnt.c and s23_srvr.c.

预定

2014-05-14

披露

2014-10-18

条目

VulDB provides additional information and datapoints for this CVE:

标识符	漏洞	CWE	可利用	对策	CVE
77872	Apple Xcode IDE Xcode Server 弱加密	310	未定义	官方修复	CVE-2014-3568
68907	Apple Mac OS X 弱加密	310	未定义	官方修复	CVE-2014-3568
67992	OpenSSL no-sslv3 弱加密	310	未经证实	官方修复	CVE-2014-3568