NVD

Id
83683  
Name
CVE-2016-9892  
Description
The esets_daemon service in ESET Endpoint Antivirus for macOS before 6.4.168.0 and Endpoint Security for macOS before 6.4.168.0 does not properly verify X.509 certificates from the edf.eset.com SSL server, which allows man-in-the-middle attackers to spoof this server and provide crafted responses to license activation requests via a self-signed certificate. NOTE: this issue can be combined with CVE-2016-0718 to execute arbitrary code remotely as root.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-03-18  
Published
2017-03-02  
Modified Date
2017-03-16  
Seq
2016-9892  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
411526 83683 CVE-2017-5196 [oss-security] 20170106 Re: CVE Request: Irssi Multiple Vulnerabilities (2017/01)  View
411527 83683 CVE-2017-5196 95310  View
411528 83683 CVE-2017-5196 https://irssi.org/security/irssi_sa_2017_01.txt  View

Related JVN