PT-2006-5194 · Apple · Safari+1

Adam Bryzak · Publicado 2006-10-02 · Atualizado 2017-07-20 · CVE-2006-4390

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Baixa

Vetor base

AV:N/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.3.9 through 10.4.7

Description The issue allows remote SSL sites to appear as trusted sites by using encryption without authentication. This can cause the lock icon in Safari to be displayed even when the site's identity cannot be trusted.

Recommendations For Apple Mac OS X versions 10.3.9 through 10.4.7, update to a version that includes a fix for this issue to ensure proper authentication of SSL sites.

Correção

Identificadores relacionados

CVE-2006-4390

Produtos afetados

Macos X

Safari

Referências · 8

• http://vupen.com/english/advisories/2006/3852 · Nota
• http://securityfocus.com/bid/20271 · Nota
• http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html · Correção, Aviso do Fabricante
• http://osvdb.org/29267 · Nota
• http://securitytracker.com/id?1016952 · Correção
• http://secunia.com/advisories/22187 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29277 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-4390 · Nota de Segurança