medium4.3
CVE-2011-3444
Address Book in Apple Mac OS X before 10.7.3 automatically switches to unencrypted sessions upon failure of encrypted connections, which allows remote attacker…
Impact
Address Book in Apple Mac OS X before 10.7.3 automatically switches to unencrypted sessions upon failure of encrypted connections, which allows remote attackers to read CardDAV data by terminating an encrypted connection and then sniffing the network.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Mac Os X | through 10.7.2 Versions 10.7.0, 10.7.1 |
| Apple | Mac Os X Server | through 10.7.2 Versions 10.7.0, 10.7.1 |