CVE-2010-1800

Currently unrated

Key Information:

Vendor
Apple
Status
Cfnetwork
Mac Os X
Mac Os X Server
Vendor
CVE Published:
25 August 2010

Summary

CFNetwork in Apple Mac OS X 10.6.3 and 10.6.4 supports anonymous SSL and TLS connections, which allows man-in-the-middle attackers to redirect a connection and obtain sensitive information via crafted responses.

References

http://securitytracker.com/id?1024359
vdb-entryx_refsource_SECTRACK
http://lists.apple.com/archives/security-announce/2010//A...
vendor-advisoryx_refsource_APPLE
http://support.apple.com/kb/HT4312
x_refsource_CONFIRM

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.