NVD

Id
26949  
Name
CVE-2015-5887  
Description
The TLS Handshake Protocol implementation in Secure Transport in Apple OS X before 10.11 accepts a Certificate Request message within a session in which no Server Key Exchange message has been sent, which allows remote attackers to have an unspecified impact via crafted TLS data.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-10-09  
Modified Date
2016-12-07  
Seq
2015-5887  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
142727 26949 CVE-2015-5887 APPLE-SA-2015-09-30-3  View
142728 26949 CVE-2015-5887 76908  View
142729 26949 CVE-2015-5887 1033703  View
142730 26949 CVE-2015-5887 https://support.apple.com/HT205267  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9832 JVNDB-2015-005152 Apple OS X の Secure Transport の TLS Handshake Protocol の実装における脆弱性 Apple OS X の Secure Transport の TLS Handshake Protocol の実装は、ServerKeyExchange メッセージが送信されていないセッション内の CertificateRequest メッセージを受け付けるため、不特定の影響を受ける脆弱性が存在します。 CVE-2015-5887 83112 CVE-2015-5887 26949 10 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005152.html 2015-09-30 2015-10-13 View