CVE

Id
39158  
CVE No.
CVE-2009-1723  
Status
Candidate  
Description
CFNetwork in Apple Mac OS X 10.5 before 10.5.8 places an incorrect URL in a certificate warning in certain 302 redirection scenarios, which makes it easier for remote attackers to trick a user into visiting an arbitrary https web site by leveraging an open redirect vulnerability, a different issue than CVE-2009-2062.  
Phase
Assigned (20090520)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
430571 39158 CVE-2009-1723 CONFIRM:http://support.apple.com/kb/HT3757  View
430572 39158 CVE-2009-1723 CONFIRM:http://support.apple.com/kb/HT4225  View
430573 39158 CVE-2009-1723 APPLE:APPLE-SA-2009-08-05-1  View
430574 39158 CVE-2009-1723 URL:http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html  View
430575 39158 CVE-2009-1723 APPLE:APPLE-SA-2010-06-21-1  View
430576 39158 CVE-2009-1723 URL:http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html  View
430577 39158 CVE-2009-1723 CERT:TA09-218A  View
430578 39158 CVE-2009-1723 URL:http://www.us-cert.gov/cas/techalerts/TA09-218A.html  View
430579 39158 CVE-2009-1723 BID:35954  View
430580 39158 CVE-2009-1723 URL:http://www.securityfocus.com/bid/35954  View
430581 39158 CVE-2009-1723 OSVDB:56846  View
430582 39158 CVE-2009-1723 URL:http://osvdb.org/56846  View
430583 39158 CVE-2009-1723 SECUNIA:36096  View
430584 39158 CVE-2009-1723 URL:http://secunia.com/advisories/36096  View
430585 39158 CVE-2009-1723 VUPEN:ADV-2009-2172  View
430586 39158 CVE-2009-1723 URL:http://www.vupen.com/english/advisories/2009/2172  View
430587 39158 CVE-2009-1723 XF:macosx-cfnetwork-weak-security(52418)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40988 JVNDB-2009-001994 Apple Mac OS の CoreTypes 内にあるブラックリストにおける任意の JavaScript を実行される脆弱性 Apple Mac OS の CoreTypes 内にあるブラックリストには、Web ページからダウンロードする場合などに危険性があるとみなされるコンテンツタイプのリストに不備があるため、任意の JavaScript を実行される脆弱性が存在します。 CVE-2009-1727 39158 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001994.html  View