SecuritySpace - CVE-2015-5894

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2015-5894

Description: The X.509 certificate-trust implementation in Apple OS X before 10.11 does not recognize that the kSecRevocationRequirePositiveResponse flag implies a revocation-checking requirement, which makes it easier for man-in-the-middle attackers to spoof endpoints by leveraging access to a revoked certificate.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2015-5894
http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html
BugTraq ID: 76908
http://www.securityfocus.com/bid/76908
http://www.securitytracker.com/id/1033703

CVE ID:	CVE-2015-5894
Description:	The X.509 certificate-trust implementation in Apple OS X before 10.11 does not recognize that the kSecRevocationRequirePositiveResponse flag implies a revocation-checking requirement, which makes it easier for man-in-the-middle attackers to spoof endpoints by leveraging access to a revoked certificate.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2015-5894 http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html BugTraq ID: 76908 http://www.securityfocus.com/bid/76908 http://www.securitytracker.com/id/1033703