7.4

CVE-2014-1266

Exploit
The SSLVerifySignedServerKeyExchange function in libsecurity_ssl/lib/sslKeyExchange.c in the Secure Transport feature in the Data Security component in Apple iOS 6.x before 6.1.6 and 7.x before 7.0.6, Apple TV 6.x before 6.0.2, and Apple OS X 10.9.x before 10.9.2 does not check the signature in a TLS Server Key Exchange message, which allows man-in-the-middle attackers to spoof SSL servers by (1) using an arbitrary private key for the signing step or (2) omitting the signing step.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ iPhone OS Version >= 6.0 < 6.1.6
Apple ≫ iPhone OS Version >= 7.0 < 7.0.6
Apple ≫ macOS X Version >= 10.9 < 10.9.2
Apple ≫ tvOS Version >= 6.0 < 6.0.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.72% 0.92
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.4 2.2 5.2
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
nvd@nist.gov 5.8 8.6 4.9
AV:N/AC:M/Au:N/C:P/I:P/A:N
CWE-295 Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

http://support.apple.com/kb/HT6150
Vendor Advisory
http://it.slashdot.org/comments.pl?sid=4821073&cid=46310187
Issue Tracking
http://support.apple.com/kb/HT6146
Vendor Advisory
http://support.apple.com/kb/HT6147
Vendor Advisory
http://support.apple.com/kb/HT6148
Vendor Advisory
https://news.ycombinator.com/item?id=7281378
Exploit
Issue Tracking
https://www.cs.columbia.edu/~smb/blog/2014-02/2014-02-23.html
Exploit
https://www.cs.columbia.edu/~smb/blog/2014-02/2014-02-24.html
Exploit
https://www.imperialviolet.org/2014/02/22/applebug.html
Exploit