CVE-2010-1800: Infoleak
Published Aug 25, 2010
·Updated
CFNetwork in Apple Mac OS X 10.6.3 and 10.6.4 supports anonymous SSL and TLS connections, which allows man-in-the-middle attackers to redirect a connection and obtain sensitive information via crafted responses.
Affected Software
5 affected components
Apple CFNetwork
Apple iOS and macOS=10.6.3
Apple iOS and macOS=10.6.4
Apple Mac OS X Server=10.6.3
Apple Mac OS X Server=10.6.4
Remediation
Patch Available
Event History
Aug 25, 2010
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Data Sourced
08:00 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-1800?
CVE-2010-1800 is considered a high-severity vulnerability due to its potential for man-in-the-middle attacks.
2
How do I fix CVE-2010-1800?
To fix CVE-2010-1800, users should upgrade to a newer version of Mac OS X or apply applicable security patches provided by Apple.
3
Which systems are affected by CVE-2010-1800?
CVE-2010-1800 affects Mac OS X versions 10.6.3 and 10.6.4, as well as Mac OS X Server versions 10.6.3 and 10.6.4.
4
What type of attack does CVE-2010-1800 enable?
CVE-2010-1800 enables man-in-the-middle attacks, allowing attackers to intercept and manipulate SSL and TLS connections.
5
When was CVE-2010-1800 discovered?
CVE-2010-1800 was discovered and publicly disclosed in 2010.