Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2010-1378

Опубликовано: 15 нояб. 2010
Источник: nvd
CVSS3: 9.8
CVSS2: 7.5
EPSS Низкий

Описание

OpenSSL in Apple Mac OS X 10.6.x before 10.6.5 does not properly perform arithmetic, which allows remote attackers to bypass X.509 certificate authentication via an arbitrary certificate issued by a legitimate Certification Authority.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
Версия от 10.6.0 (включая) до 10.6.5 (исключая)
cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*
Версия от 10.6.0 (включая) до 10.6.5 (исключая)

EPSS

Процентиль: 45%
0.00229
Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-295

Связанные уязвимости

CVSS3: 9.8
ubuntu
около 15 лет назад

OpenSSL in Apple Mac OS X 10.6.x before 10.6.5 does not properly perform arithmetic, which allows remote attackers to bypass X.509 certificate authentication via an arbitrary certificate issued by a legitimate Certification Authority.

CVSS3: 9.8
debian
около 15 лет назад

OpenSSL in Apple Mac OS X 10.6.x before 10.6.5 does not properly perfo ...

CVSS3: 9.8
github
почти 4 года назад

OpenSSL in Apple Mac OS X 10.6.x before 10.6.5 does not properly perform arithmetic, which allows remote attackers to bypass X.509 certificate authentication via an arbitrary certificate issued by a legitimate Certification Authority.

EPSS

Процентиль: 45%
0.00229
Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-295