NetSight
IP …
medium4.3

CVE-2009-1723

CFNetwork in Apple Mac OS X 10.5 before 10.5.8 places an incorrect URL in a certificate warning in certain 302 redirection scenarios, which makes it easier for…

Impact

CFNetwork in Apple Mac OS X 10.5 before 10.5.8 places an incorrect URL in a certificate warning in certain 302 redirection scenarios, which makes it easier for remote attackers to trick a user into visiting an arbitrary https web site by leveraging an open redirect vulnerability, a different issue than CVE-2009-2062.

Affected products

VendorProductAffected versions
AppleMac Os X
Versions 10.5.6, 10.5, 10.5.0, 10.5.1, 10.5.2, 10.5.3
AppleMac Os X Server
Versions 10.5, 10.5.0, 10.5.1, 10.5.2, 10.5.3, 10.5.4

References