NVD

Id
7352  
Name
CVE-2011-0228  
Description
The Data Security component in Apple iOS before 4.2.10 and 4.3.x before 4.3.5 does not check the basicConstraints parameter during validation of X.509 certificate chains, which allows man-in-the-middle attackers to spoof an SSL server by using a non-CA certificate to sign a certificate for an arbitrary domain.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-08-29  
Modified Date
2011-09-21  
Seq
2011-0228  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
41424 7352 CVE-2011-0228 APPLE-SA-2011-07-25-2  View
41425 7352 CVE-2011-0228 APPLE-SA-2011-07-25-1  View
41426 7352 CVE-2011-0228 8361  View
41427 7352 CVE-2011-0228 1025837  View
41428 7352 CVE-2011-0228 http://support.apple.com/kb/HT4824  View
41429 7352 CVE-2011-0228 http://support.apple.com/kb/HT4825  View
41430 7352 CVE-2011-0228 20110725 TWSL2011-007: iOS SSL Implementation Does Not Validate Certificate Chain  View
41431 7352 CVE-2011-0228 48877  View
41432 7352 CVE-2011-0228 https://www.trustwave.com/spiderlabs/advisories/TWSL2011-007.txt  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31873 JVNDB-2011-002113 Apple iOS における脆弱性に対するアップデート Apple から iOS 向けのアップデートが公開されました。 CVE-2011-0228 48135 CVE-2011-0228 7352 7.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002113.html 2011-07-27 2013-06-26 View