Vulnerability in Apple Mac OS X
CVE-2011-3444
Address Book in Apple Mac OS X before 10.7.3 automatically switches to unencrypted sessions upon failure of encrypted connections, which allows remote attackers to read CardDAV data by terminating an encrypted connection and then sniffing the network.
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.014 (70.4th percentile) — read the EPSS interpretation.
Affected products
- Apple Mac_os_x — versions 10.7.0, 10.7.1
- Apple Mac_os_x_server — versions 10.7.0, 10.7.1
- N/a — versions n/a
Weakness classification (CWE)
References
- product-security@apple.com (x_refsource_CONFIRM, Vendor Advisory)
- product-security@apple.com (vendor-advisory, x_refsource_APPLE, Vendor Advisory)