CVE

Id
68590  
CVE No.
CVE-2014-1295  
Status
Candidate  
Description
Secure Transport in Apple iOS before 7.1.1, Apple OS X 10.8.x and 10.9.x through 10.9.2, and Apple TV before 6.1.1 does not ensure that a server"s X.509 certificate is the same during renegotiation as it was before renegotiation, which allows man-in-the-middle attackers to obtain sensitive information or modify TLS session data via a "triple handshake attack."  
Phase
Assigned (20140108)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
659224 68590 CVE-2014-1295 MISC:https://secure-resumption.com/  View
659225 68590 CVE-2014-1295 APPLE:APPLE-SA-2014-04-22-1  View
659226 68590 CVE-2014-1295 URL:http://archives.neohapsis.com/archives/bugtraq/2014-04/0134.html  View
659227 68590 CVE-2014-1295 APPLE:APPLE-SA-2014-04-22-2  View
659228 68590 CVE-2014-1295 URL:http://archives.neohapsis.com/archives/bugtraq/2014-04/0136.html  View
659229 68590 CVE-2014-1295 APPLE:APPLE-SA-2014-04-22-3  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
12927 JVNDB-2014-001802 Apple Safari などで使用される Webkit におけるヒープベースのバッファオーバーフローの脆弱性 Apple Safari などで使用される Webkit には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2014-1303 68590 10 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001802.html  View