Anfälligkeitssuche        Suche in 172616 CVE Beschreibungen
und 81291 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.902474
Kategorie:Mac OS X Local Security Checks
Titel:Apple Mac OS X Keychain Certificate Settings Security Bypass Vulnerability
Zusammenfassung:This host is installed with Mac OS X and is prone to a security; bypass vulnerability.
Beschreibung:Summary:
This host is installed with Mac OS X and is prone to a security
bypass vulnerability.

Vulnerability Insight:
The flaw is due to an error in the implementation of Certificate
Trust Policy, which allows attacker to bypass KeyChain security settings to accept
an Extended Validation certificate as valid.

Vulnerability Impact:
Successful exploitation could allow attackers to bypass security
restrictions and launch further attacks on the system.

Affected Software/OS:
Mac OS X version 10.6 to 10.6.8

Mac OS X Server version 10.6 to 10.6.8.

Solution:
Upgrade to Mac OS X version 10.7.3 or later.

CVSS Score:
4.3

CVSS Vector:
AV:N/AC:M/Au:N/C:N/I:P/A:N

Querverweis: BugTraq ID: 49429
Common Vulnerability Exposure (CVE) ID: CVE-2011-3422
http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html
http://www.securityfocus.com/bid/49429
http://www.computerworld.com/s/article/9219669/Mac_OS_X_can_t_properly_revoke_dodgy_digital_certificates
http://www.securitytracker.com/id?1026002
XForce ISS Database: macos-keychain-sec-bypass(69556)
https://exchange.xforce.ibmcloud.com/vulnerabilities/69556
CopyrightCopyright (c) 2011 SecPod

Dies ist nur einer von 81291 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2020 E-Soft Inc. Alle Rechte vorbehalten.