CVEvulnerability
CVE-2011-3444
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-02-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-310
Description
Address Book in Apple Mac OS X before 10.7.3 automatically switches to unencrypted sessions upon failure of encrypted connections, which allows remote attackers to read CardDAV data by terminating an encrypted connection and then sniffing the network.
Affected configurations
• apple mac os x (<= 10.7.2)
• apple mac os x 10.7.0
• apple mac os x 10.7.1
• apple mac os x server (<= 10.7.2)
• apple mac os x server 10.7.0
• apple mac os x server 10.7.1
Related
Weakness · not in database (1)
References
- http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html Vendor Advisory
- http://support.apple.com/kb/HT5130 Vendor Advisory
- http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html Vendor Advisory
- http://support.apple.com/kb/HT5130 Vendor Advisory