CVE-2011-3427: Infoleak
The Data Security component in Apple iOS before 5 and Apple TV before 4.4 does not properly restrict use of the MD5 hash algorithm within X.509 certificates, which makes it easier for man-in-the-middle attackers to spoof servers or obtain sensitive information via a crafted certificate.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-3427?
CVE-2011-3427 has a medium severity rating due to its potential for man-in-the-middle attacks.
How do I fix CVE-2011-3427?
To fix CVE-2011-3427, update to the latest version of iOS or Apple TV firmware that addresses this vulnerability.
Which versions are affected by CVE-2011-3427?
CVE-2011-3427 affects various versions of iOS before 5 and Apple TV before 4.4.
What kind of attacks can exploit CVE-2011-3427?
CVE-2011-3427 can be exploited by attackers to spoof servers or intercept sensitive information.
Is there a workaround for CVE-2011-3427 if I can't update?
There is no official workaround for CVE-2011-3427; the best solution is to update affected devices.