CVE-2006-4409: Medium severity Apple iOS and macOS vulnerability
The Online Certificate Status Protocol (OCSP) service in the Security Framework in Apple Mac OS X 10.4 through 10.4.8 retrieve certificate revocation lists (CRL) when an HTTP proxy is in use, which could cause the system to accept certificates that have been revoked.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-4409?
CVE-2006-4409 is considered a moderate severity vulnerability as it can lead to the acceptance of revoked certificates.
How do I fix CVE-2006-4409?
The fix for CVE-2006-4409 involves updating to a patched version of Apple Mac OS X that addresses this certificate revocation issue.
Which versions of Mac OS X are affected by CVE-2006-4409?
CVE-2006-4409 affects Apple Mac OS X versions 10.4 through 10.4.8.
What type of vulnerability is CVE-2006-4409?
CVE-2006-4409 is a vulnerability in the Online Certificate Status Protocol (OCSP) service that allows acceptance of revoked certificates.
Can CVE-2006-4409 impact my system's security?
Yes, CVE-2006-4409 can significantly impact system security by allowing the use of revoked SSL certificates.