Back to search
CVE-2013-1028
Published: Sep 16, 2013
Modified: Aug 6, 2024
PUBLISHED
Description
The IPSec implementation in Apple Mac OS X before 10.8.5, when Hybrid Auth is used, does not verify X.509 certificates from security gateways, which allows man-in-the-middle attackers to spoof security gateways and obtain sensitive information via a crafted certificate.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
54886
third-party-advisory
x_refsource_SECUNIA
http://support.apple.com/kb/HT5934
x_refsource_CONFIRM
APPLE-SA-2013-09-12-1
vendor-advisory
x_refsource_APPLE
http://support.apple.com/kb/HT5880
x_refsource_CONFIRM
APPLE-SA-2013-09-18-2
vendor-advisory
x_refsource_APPLE
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now