Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.902474
Category:Mac OS X Local Security Checks
Title:Apple Mac OS X Keychain Certificate Settings Security Bypass Vulnerability
Summary:This host is installed with Mac OS X and is prone to a security; bypass vulnerability.
Description:Summary:
This host is installed with Mac OS X and is prone to a security
bypass vulnerability.

Vulnerability Insight:
The flaw is due to an error in the implementation of Certificate
Trust Policy, which allows attacker to bypass KeyChain security settings to accept
an Extended Validation certificate as valid.

Vulnerability Impact:
Successful exploitation could allow attackers to bypass security
restrictions and launch further attacks on the system.

Affected Software/OS:
Mac OS X version 10.6 to 10.6.8

Mac OS X Server version 10.6 to 10.6.8.

Solution:
Upgrade to Mac OS X version 10.7.3 or later.

CVSS Score:
4.3

CVSS Vector:
AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-Ref: BugTraq ID: 49429
Common Vulnerability Exposure (CVE) ID: CVE-2011-3422
http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html
http://www.securityfocus.com/bid/49429
http://www.computerworld.com/s/article/9219669/Mac_OS_X_can_t_properly_revoke_dodgy_digital_certificates
http://www.securitytracker.com/id?1026002
XForce ISS Database: macos-keychain-sec-bypass(69556)
https://exchange.xforce.ibmcloud.com/vulnerabilities/69556
CopyrightCopyright (C) 2011 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2021 E-Soft Inc. All rights reserved.