PT-2015-5051 · Apple · Ios+2

Alfredo Pironti + 4 · Publicado 2015-03-11 · Atualizado 2021-04-07 · CVE-2015-1067

Telegram · Cvenotify

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

🚨 CVE-2015-1637 Schannel (aka Secure Channel) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly restrict TLS state transitions, which makes it easier for remote attackers to conduct cipher-downgrade attacks to EXPORT RSA ciphers via crafted TLS traffic, related to the "FREAK" issue, a different vulnerability than CVE-2015-0204 and CVE-2015-1067.

🎖@cveNotify

Exploit

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2015-1067

Produtos afetados

Ios

Macos X

Tvos

Referências · 15

• 🔥 https://freakattack.com · Exploit
• http://securitytracker.com/id/1031830 · Nota
• http://securityfocus.com/bid/73009 · Nota
• http://securitytracker.com/id/1031829 · Nota
• https://support.apple.com/HT204426 · Aviso do Fabricante
• http://lists.apple.com/archives/security-announce/2015/Mar/msg00002.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-1067 · Nota de Segurança
• https://support.apple.com/HT204413 · Aviso do Fabricante
• https://support.apple.com/HT204423 · Aviso do Fabricante
• http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html · Aviso do Fabricante
• https://support.apple.com/HT204659 · Aviso do Fabricante
• http://lists.apple.com/archives/security-announce/2015/Mar/msg00001.html · Aviso do Fabricante
• https://t.me/cvenotify/12853 · Publicação no Telegram
• https://support.apple.com/kb/HT204870 · Nota
• http://lists.apple.com/archives/security-announce/2015/Mar/msg00000.html · Aviso do Fabricante