NetSight
critical9.8

CVE-2010-1378

OpenSSL in Apple Mac OS X 10.6.x before 10.6.5 does not properly perform arithmetic, which allows remote attackers to bypass X.509 certificate authentication v…

Impact

OpenSSL in Apple Mac OS X 10.6.x before 10.6.5 does not properly perform arithmetic, which allows remote attackers to bypass X.509 certificate authentication via an arbitrary certificate issued by a legitimate Certification Authority.

Affected products

VendorProductAffected versions
AppleMac Os X
from 10.6.0 before 10.6.5
AppleMac Os X Server
from 10.6.0 before 10.6.5

Weakness classification

References