NVD

Id
48992  
Name
CVE-2009-1723  
Description
CFNetwork in Apple Mac OS X 10.5 before 10.5.8 places an incorrect URL in a certificate warning in certain 302 redirection scenarios, which makes it easier for remote attackers to trick a user into visiting an arbitrary https web site by leveraging an open redirect vulnerability, a different issue than CVE-2009-2062.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2009-08-06  
Modified Date
2010-06-24  
Seq
2009-1723  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
247753 48992 CVE-2009-1723 APPLE-SA-2009-08-05-1  View
247754 48992 CVE-2009-1723 APPLE-SA-2010-06-21-1  View
247755 48992 CVE-2009-1723 http://support.apple.com/kb/HT3757  View
247756 48992 CVE-2009-1723 http://support.apple.com/kb/HT4225  View
247757 48992 CVE-2009-1723 35954  View
247758 48992 CVE-2009-1723 TA09-218A  View
247759 48992 CVE-2009-1723 ADV-2009-2172  View
247760 48992 CVE-2009-1723 macosx-cfnetwork-weak-security(52418)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40986 JVNDB-2009-001992 Apple Mac OS の CFNetwork における任意の HTTPS Web サイトを訪問しているように偽装可能な脆弱性 Apple Mac OS の CFNetwork には、302 リダイレクションによって証明書の警告メッセージが表示された場合に、任意の HTTPS Web サイトを訪問しているように偽装可能な脆弱性が存在します。 CVE-2009-1723 39154 CVE-2009-1723 48992 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001992.html 2009-08-05 2010-07-13 View