← Back to CVEs

CVE-2006-4409

N/A

Description

The Online Certificate Status Protocol (OCSP) service in the Security Framework in Apple Mac OS X 10.4 through 10.4.8 retrieve certificate revocation lists (CRL) when an HTTP proxy is in use, which could cause the system to accept certificates that have been revoked.

CVE Details

CVSS v3.1 ScoreN/A

Published11/30/2006

Last Modified4/9/2025

Sourcenvd

Honeypot Sightings0

Affected Products

apple:mac_os_x

References

http://docs.info.apple.com/article.html?artnum=304829(cve@mitre.org)

http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html(cve@mitre.org)

http://secunia.com/advisories/23155(cve@mitre.org)

http://securitytracker.com/id?1017298(cve@mitre.org)

http://www.kb.cert.org/vuls/id/811384(cve@mitre.org)

http://www.osvdb.org/30729(cve@mitre.org)

http://www.securityfocus.com/bid/21335(cve@mitre.org)

http://www.us-cert.gov/cas/techalerts/TA06-333A.html(cve@mitre.org)

http://www.vupen.com/english/advisories/2006/4750(cve@mitre.org)

http://docs.info.apple.com/article.html?artnum=304829(af854a3a-2127-422b-91ae-364da2661108)

http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/23155(af854a3a-2127-422b-91ae-364da2661108)

http://securitytracker.com/id?1017298(af854a3a-2127-422b-91ae-364da2661108)

http://www.kb.cert.org/vuls/id/811384(af854a3a-2127-422b-91ae-364da2661108)

http://www.osvdb.org/30729(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/21335(af854a3a-2127-422b-91ae-364da2661108)

http://www.us-cert.gov/cas/techalerts/TA06-333A.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.vupen.com/english/advisories/2006/4750(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.