CVE-2007-4680 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2007-4680
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-4680

Description: CFNetwork in Apple Mac OS X 10.3.9 and 10.4 through 10.4.10 does not properly validate certificates, which allows remote attackers to spoof trusted SSL certificates via a man-in-the-middle attack.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/38463 ST 1018950 SAID Secunia Advisory: SA27643 CONFIRM http://docs.info.apple.com/article.html?artnum=307563 http://docs.info.apple.com/article.html?artnum=307041 CERT http://www.us-cert.gov/cas/techalerts/TA07-319A.html BID 26444 APPLE http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html

Return to the previous page.