Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | |||
Test ID: | 1.3.6.1.4.1.25623.1.0.902474 |
Category: | Mac OS X Local Security Checks |
Title: | Apple Mac OS X Keychain Certificate Settings Security Bypass Vulnerability |
Summary: | This host is installed with Mac OS X and is prone to a security; bypass vulnerability. |
Description: | Summary: This host is installed with Mac OS X and is prone to a security bypass vulnerability. Vulnerability Insight: The flaw is due to an error in the implementation of Certificate Trust Policy, which allows attacker to bypass KeyChain security settings to accept an Extended Validation certificate as valid. Vulnerability Impact: Successful exploitation could allow attackers to bypass security restrictions and launch further attacks on the system. Affected Software/OS: Mac OS X version 10.6 to 10.6.8 Mac OS X Server version 10.6 to 10.6.8. Solution: Upgrade to Mac OS X version 10.7.3 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N |
Cross-Ref: |
BugTraq ID: 49429 Common Vulnerability Exposure (CVE) ID: CVE-2011-3422 http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html http://www.securityfocus.com/bid/49429 http://www.computerworld.com/s/article/9219669/Mac_OS_X_can_t_properly_revoke_dodgy_digital_certificates http://www.securitytracker.com/id?1026002 XForce ISS Database: macos-keychain-sec-bypass(69556) https://exchange.xforce.ibmcloud.com/vulnerabilities/69556 |
Copyright | Copyright (C) 2011 Greenbone Networks GmbH |
This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below. |