CVE

Id
48140  
CVE No.
CVE-2011-0228  
Status
Candidate  
Description
The Data Security component in Apple iOS before 4.2.10 and 4.3.x before 4.3.5 does not check the basicConstraints parameter during validation of X.509 certificate chains, which allows man-in-the-middle attackers to spoof an SSL server by using a non-CA certificate to sign a certificate for an arbitrary domain.  
Phase
Assigned (20101223)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
523279 48140 CVE-2011-0228 BUGTRAQ:20110725 TWSL2011-007: iOS SSL Implementation Does Not Validate Certificate Chain  View
523280 48140 CVE-2011-0228 URL:http://www.securityfocus.com/archive/1/archive/1/518982/100/0/threaded  View
523281 48140 CVE-2011-0228 MISC:https://www.trustwave.com/spiderlabs/advisories/TWSL2011-007.txt  View
523282 48140 CVE-2011-0228 CONFIRM:http://support.apple.com/kb/HT4824  View
523283 48140 CVE-2011-0228 CONFIRM:http://support.apple.com/kb/HT4825  View
523284 48140 CVE-2011-0228 APPLE:APPLE-SA-2011-07-25-1  View
523285 48140 CVE-2011-0228 URL:http://lists.apple.com/archives/security-announce/2011//Jul/msg00005.html  View
523286 48140 CVE-2011-0228 APPLE:APPLE-SA-2011-07-25-2  View
523287 48140 CVE-2011-0228 URL:http://lists.apple.com/archives/security-announce/2011//Jul/msg00004.html  View
523288 48140 CVE-2011-0228 BID:48877  View
523289 48140 CVE-2011-0228 URL:http://www.securityfocus.com/bid/48877  View
523290 48140 CVE-2011-0228 SECTRACK:1025837  View
523291 48140 CVE-2011-0228 URL:http://securitytracker.com/id?1025837  View
523292 48140 CVE-2011-0228 SECUNIA:45369  View
523293 48140 CVE-2011-0228 URL:http://secunia.com/advisories/45369  View
523294 48140 CVE-2011-0228 SREASON:8361  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
31810 JVNDB-2011-002050 Apple Safari にて使用される WebKit における任意のコードを実行される脆弱性 Apple Safari にて使用される WebKit には、任意のコードを実行される、またはサービス運用妨害 (メモリ破損およびアプリケーションクラッシュ) 状態となる脆弱性が存在します。 CVE-2011-0233 48140 9.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002050.html  View