CVE-2011-0199: Input Validation
The Certificate Trust Policy component in Apple Mac OS X before 10.6.8 does not perform CRL checking for Extended Validation (EV) certificates that lack OCSP URLs, which might allow man-in-the-middle attackers to spoof an SSL server via a revoked certificate.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-0199?
CVE-2011-0199 is considered a critical vulnerability as it allows man-in-the-middle attacks through the spoofing of SSL servers using revoked certificates.
How do I fix CVE-2011-0199?
To fix CVE-2011-0199, users should update their systems to Mac OS X versions 10.6.8 or later, where this vulnerability is addressed.
What type of attack does CVE-2011-0199 expose users to?
CVE-2011-0199 exposes users to man-in-the-middle attacks, which can lead to SSL server spoofing.
Which versions of Mac OS X are affected by CVE-2011-0199?
CVE-2011-0199 affects Apple Mac OS X versions before 10.6.8, including all versions from 10.6.0 to 10.6.7.
Is CVE-2011-0199 related to Extended Validation certificates?
Yes, CVE-2011-0199 specifically concerns the lack of CRL checking for Extended Validation certificates that do not have OCSP URLs.