NVD

Id
9895  
Name
CVE-2011-3213  
Description
The File Systems component in Apple Mac OS X before 10.7.2 does not properly track the specific X.509 certificate that a user manually accepted for an initial https WebDAV connection, which allows man-in-the-middle attackers to hijack WebDAV communication by presenting an arbitrary certificate for a subsequent connection.  
Reject
 
CVSS Version
2  
CVSS Score
7.6  
Severity
High  
CVSS Base Score
7.6  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-10-14  
Modified Date
2012-01-13  
Seq
2011-3213  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
56841 9895 CVE-2011-3213 APPLE-SA-2011-10-12-3  View
56842 9895 CVE-2011-3213 http://support.apple.com/kb/HT5002  View
56843 9895 CVE-2011-3213 50085  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
32239 JVNDB-2011-002479 Apple Mac OS X の File Systems コンポーネントにおける WebDAV セッションをハイジャックされる脆弱性 Apple Mac OS X の File Systems コンポーネントは、最初の https による WebDAV セッションをユーザが手動で許可した場合、X.509 認証を適切に追跡しないため、WevDAV セッションをハイジャックされる脆弱性が存在します。 CVE-2011-3213 51120 CVE-2011-3213 9895 7.6 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002479.html 2011-10-14 2011-10-25 View