QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2006-4407

Back to search

CVE-2006-4407

Published: Nov 30, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

The Security Framework in Apple Mac OS X 10.3.x up to 10.3.9 does not properly prioritize encryption ciphers when negotiating the strongest shared cipher, which causes Secure Transport to user a weaker cipher that makes it easier for remote attackers to decrypt traffic.

VendorProductVersions

n/a

n/a

affected
n/a

References

ADV-2006-4750
vdb-entry
x_refsource_VUPEN
30731
vdb-entry
x_refsource_OSVDB
21335
vdb-entry
x_refsource_BID
VU#734032
third-party-advisory
x_refsource_CERT-VN
1017298
vdb-entry
x_refsource_SECTRACK
23155
third-party-advisory
x_refsource_SECUNIA
APPLE-SA-2006-11-28
vendor-advisory
x_refsource_APPLE
TA06-333A
third-party-advisory
x_refsource_CERT

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now