PT-2006-5194 · Apple · Safari+1

Adam Bryzak · Published 2006-10-02 · Updated 2017-07-20 · CVE-2006-4390

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.3.9 through 10.4.7

Description The issue allows remote SSL sites to appear as trusted sites by using encryption without authentication. This can cause the lock icon in Safari to be displayed even when the site's identity cannot be trusted.

Recommendations For Apple Mac OS X versions 10.3.9 through 10.4.7, update to a version that includes a fix for this issue to ensure proper authentication of SSL sites.

Fix

Related Identifiers

CVE-2006-4390

Affected Products

Macos X

Safari

References · 8

• http://securitytracker.com/id?1016952 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-4390 · Security Note
• http://vupen.com/english/advisories/2006/3852 · Note
• http://securityfocus.com/bid/20271 · Note
• http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html · Patch, Vendor Advisory
• http://osvdb.org/29267 · Note
• http://secunia.com/advisories/22187 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29277 · Note