NetSight
IP …
critical9.3

CVE-2010-1377

Open Directory in Apple Mac OS X 10.6 before 10.6.4 creates an unencrypted connection upon certain SSL failures, which allows man-in-the-middle attackers to sp…

Impact

Open Directory in Apple Mac OS X 10.6 before 10.6.4 creates an unencrypted connection upon certain SSL failures, which allows man-in-the-middle attackers to spoof arbitrary network account servers, and possibly execute arbitrary code, via unspecified vectors.

Affected products

VendorProductAffected versions
AppleMac Os X
Versions 10.6.0, 10.6.1, 10.6.2, 10.6.3
AppleMac Os X Server
Versions 10.6.0, 10.6.1, 10.6.2, 10.6.3

Weakness classification

CWE-310

References