Unscored severity · published Aug 25, 2010
CVE-2010-1802
libsecurity in Apple Mac OS X 10.5.8 and 10.6.4 does not properly perform comparisons to domain-name strings in X.509 certificates, which allows man-in-the-middle attackers to…
–
CVSS
0.8%
EPSS
No
On KEV
Description
libsecurity in Apple Mac OS X 10.5.8 and 10.6.4 does not properly perform comparisons to domain-name strings in X.509 certificates, which allows man-in-the-middle attackers to spoof SSL servers via a certificate associated with a similar domain name, as demonstrated by use of a www.example.con certificate to spoof www.example.com.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 56% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Libsecurity · Apple
All versions, or not specified · source: NVD
MO
Mac OS X · Apple
10.5.8; 10.6.4 · source: NVD
MO
Mac OS X Server · Apple
10.5.8; 10.6.4 · source: NVD