OSVDB ID: 30729 Title: Apple Mac OS X Security Framework Online Certificate Status Protocol (OCSP) Revoked Certificate Weakness |
Info |
|
|
Dates |
||||
|
|
Description |
Mac OS X contains a flaw that may allow a malicious user to used a revoked certificate. The issue is triggered when an HTTP proxy is in use, which interferes with the Online Certificate Status Protocol (OCSP). It is possible that the flaw may allow revoked certificates to be used without warning resulting in a loss of integrity. |
Classification |
Location:
Remote / Network Access
Attack Type: Cryptographic Impact: Loss of Integrity Exploit: Exploit Unknown Disclosure: OSVDB Verified |
Solution |
Currently, there are no known workarounds or upgrades to correct this issue. However, Apple has released a patch to address this vulnerability. |
Products |
|
References |
|
Credit |
|