ID de Prueba:	1.3.6.1.4.1.25623.1.0.902474
Categoría:	Mac OS X Local Security Checks
Título:	Apple Mac OS X Keychain Certificate Settings Security Bypass Vulnerability
Resumen:	Mac OS X is prone to a security bypass vulnerability.
Descripción:	Summary: Mac OS X is prone to a security bypass vulnerability. Vulnerability Insight: The flaw is due to an error in the implementation of Certificate Trust Policy, which allows attacker to bypass KeyChain security settings to accept an Extended Validation certificate as valid. Vulnerability Impact: Successful exploitation could allow attackers to bypass security restrictions and launch further attacks on the system. Affected Software/OS: Mac OS X version 10.6 to 10.6.8 Mac OS X Server version 10.6 to 10.6.8. Solution: Upgrade to Mac OS X version 10.7.3 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-3422 http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html BugTraq ID: 49429 http://www.securityfocus.com/bid/49429 http://www.computerworld.com/s/article/9219669/Mac_OS_X_can_t_properly_revoke_dodgy_digital_certificates http://www.securitytracker.com/id?1026002 XForce ISS Database: macos-keychain-sec-bypass(69556) https://exchange.xforce.ibmcloud.com/vulnerabilities/69556
Copyright	Copyright (C) 2011 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.