Test ID:	1.3.6.1.4.1.25623.1.0.902474
Category:	Mac OS X Local Security Checks
Title:	Apple Mac OS X Keychain Certificate Settings Security Bypass Vulnerability
Summary:	Mac OS X is prone to a security bypass vulnerability.
Description:	Summary: Mac OS X is prone to a security bypass vulnerability. Vulnerability Insight: The flaw is due to an error in the implementation of Certificate Trust Policy, which allows attacker to bypass KeyChain security settings to accept an Extended Validation certificate as valid. Vulnerability Impact: Successful exploitation could allow attackers to bypass security restrictions and launch further attacks on the system. Affected Software/OS: Mac OS X version 10.6 to 10.6.8 Mac OS X Server version 10.6 to 10.6.8. Solution: Upgrade to Mac OS X version 10.7.3 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-3422 http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html BugTraq ID: 49429 http://www.securityfocus.com/bid/49429 http://www.computerworld.com/s/article/9219669/Mac_OS_X_can_t_properly_revoke_dodgy_digital_certificates http://www.securitytracker.com/id?1026002 XForce ISS Database: macos-keychain-sec-bypass(69556) https://exchange.xforce.ibmcloud.com/vulnerabilities/69556
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.