CVE

Id
48111  
CVE No.
CVE-2011-0199  
Status
Candidate  
Description
The Certificate Trust Policy component in Apple Mac OS X before 10.6.8 does not perform CRL checking for Extended Validation (EV) certificates that lack OCSP URLs, which might allow man-in-the-middle attackers to spoof an SSL server via a revoked certificate.  
Phase
Assigned (20101223)  
Votes
None (candidate not yet proposed)  
Comments