CVE

Id
20494  
CVE No.
CVE-2006-4390  
Status
Candidate  
Description
CFNetwork in Apple Mac OS X 10.4 through 10.4.7 and 10.3.9 allows remote SSL sites to appear as trusted sites by using encryption without authentication, which can cause the lock icon in Safari to be displayed even when the site"s identity cannot be trusted.  
Phase
Assigned (20060828)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
192206 20494 CVE-2006-4390 APPLE:APPLE-SA-2006-09-29  View
192207 20494 CVE-2006-4390 URL:http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html  View
192208 20494 CVE-2006-4390 BID:20271  View
192209 20494 CVE-2006-4390 URL:http://www.securityfocus.com/bid/20271  View
192210 20494 CVE-2006-4390 VUPEN:ADV-2006-3852  View
192211 20494 CVE-2006-4390 URL:http://www.vupen.com/english/advisories/2006/3852  View
192212 20494 CVE-2006-4390 OSVDB:29267  View
192213 20494 CVE-2006-4390 URL:http://www.osvdb.org/29267  View
192214 20494 CVE-2006-4390 SECTRACK:1016952  View
192215 20494 CVE-2006-4390 URL:http://securitytracker.com/id?1016952  View
192216 20494 CVE-2006-4390 SECUNIA:22187  View
192217 20494 CVE-2006-4390 URL:http://secunia.com/advisories/22187  View
192218 20494 CVE-2006-4390 XF:macos-cfnetwork-ssl-spoofing(29277)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58463 JVNDB-2006-000659 Apple Mac OS X の Mach 例外ポートにおけるカーネルエラー処理の脆弱性 Apple Mac OS X の Mach 例外ポートと呼ばれるカーネルのエラー処理メカニズムにおいて不備が存在し、特定の種類のエラー発生時に権限を持った細工されたプログラムの実行を許してしまう脆弱性が存在します。 CVE-2006-4392 20494 7.2 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000659.html  View