CVE-2011-3253

Опубликовано: 14 окт. 2011

Источник: nvd

CVSS2: 2.6

EPSS Низкий

Описание

CalDAV in Apple iOS before 5 does not validate X.509 certificates for SSL sessions, which allows man-in-the-middle attackers to spoof calendar servers and obtain sensitive information via an arbitrary certificate.

Ссылки

http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html
Vendor Advisory
http://support.apple.com/kb/HT4999
Vendor Advisory
http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html
Vendor Advisory
http://support.apple.com/kb/HT4999
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:iphone_os:3.0:-:iphone:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:3.1:*:*:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:3.1:-:iphone:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:3.1:-:ipodtouch:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:3.1.2:-:iphone:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:3.1.3:-:iphone:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:3.2:-:iphone:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:3.2:-:ipodtouch:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:3.2.1:*:*:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:3.2.1:-:ipad:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:3.2.2:*:*:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:4.0:*:*:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:4.0:-:iphone:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:4.0:-:ipodtouch:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:4.0.1:*:*:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:4.0.1:-:iphone:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:4.0.1:-:ipodtouch:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:4.0.2:*:*:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:4.1:*:*:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:4.2.1:*:*:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:4.2.5:*:*:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:4.2.8:*:*:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:4.3.0:*:*:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:4.3.1:*:*:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:4.3.2:*:*:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:4.3.3:*:*:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:4.3.5:*:*:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:4.3.5:-:ipad:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:4.3.5:-:ipodtouch:*:*:*:*:*

EPSS

Процентиль: 32%

0.00123

Низкий

2.6 Low

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-frpq-wjg3-5rp5

github

больше 3 лет назад