NetSight
IP …
high7.4

CVE-2014-1266

The SSLVerifySignedServerKeyExchange function in libsecurity_ssl/lib/sslKeyExchange.c in the Secure Transport feature in the Data Security component in Apple i…

Impact

The SSLVerifySignedServerKeyExchange function in libsecurity_ssl/lib/sslKeyExchange.c in the Secure Transport feature in the Data Security component in Apple iOS 6.x before 6.1.6 and 7.x before 7.0.6, Apple TV 6.x before 6.0.2, and Apple OS X 10.9.x before 10.9.2 does not check the signature in a TLS Server Key Exchange message, which allows man-in-the-middle attackers to spoof SSL servers by (1) using an arbitrary private key for the signing step or (2) omitting the signing step.

Affected products

VendorProductAffected versions
AppleIphone Os
from 6.0 before 6.1.6
from 7.0 before 7.0.6
AppleMac Os X
from 10.9 before 10.9.2
AppleTvos
from 6.0 before 6.0.2

Weakness classification

CWE-295

References