MEDIUM
The IPSec implementation in Apple Mac OS X before 10.8.5, when Hybrid Auth is used, does not verify X.509 certificates from security gateways, which allows man-in-the-middle attackers to spoof security gateways and obtain sensitive information via a crafted certificate
Published Sep 16, 2013
5.8
MEDIUMCVSS 2.0
EPSS 0.80%
Description
The IPSec implementation in Apple Mac OS X before 10.8.5, when Hybrid Auth is used, does not verify X.509 certificates from security gateways, which allows man-in-the-middle attackers to spoof security gateways and obtain sensitive information via a crafted certificate.
Affected products
No data.
Configuration 1
OR
- ≤ 6.1.4
- 1.0.0
- 1.0.1
- 1.0.2
- 1.1.0
- 1.1.1
- 1.1.2
- 1.1.3
- 1.1.4
- 1.1.5
- 2.0
- 2.0.0
- 2.0.1
- 2.0.2
- 2.1
- 2.1.1
- 2.2
- 2.2.1
- 3.0
- 3.0.1
- 3.1
- 3.1.2
- 3.1.3
- 3.2
- 3.2.1
- 3.2.2
- 4.0
- 4.0.1
- 4.0.2
- 4.1
- 4.2.1
- 4.2.5
- 4.2.8
- 4.3.0
- 4.3.1
- 4.3.2
- 4.3.3
- 4.3.5
- 5.0
- 5.0.1
- 5.1
- 5.1.1
- 6.0
- 6.0.1
- 6.0.2
- 6.1
- 6.1.2
- 6.1.3
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (6)
- http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html vendor-advisoryx_refsource_APPLEVendor Advisory
- http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html vendor-advisoryx_refsource_APPLE
- http://secunia.com/advisories/54886 third-party-advisoryx_refsource_SECUNIA
- http://support.apple.com/kb/HT5880 x_refsource_CONFIRMVendor Advisory
- http://support.apple.com/kb/HT5934 x_refsource_CONFIRM
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-1068 Advisory
| Link | Providers | Tags |
|---|---|---|
| http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html | vendor-advisoryx_refsource_APPLEVendor Advisory | |
| http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html | vendor-advisoryx_refsource_APPLE | |
| http://secunia.com/advisories/54886 | third-party-advisoryx_refsource_SECUNIA | |
| http://support.apple.com/kb/HT5880 | x_refsource_CONFIRMVendor Advisory | |
| http://support.apple.com/kb/HT5934 | x_refsource_CONFIRM | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-1068 | Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner apple
Published Sep 16, 2013
Updated Aug 6, 2024
Reserved Jan 10, 2013
Link CVE-2013-1028
CISA Vulnrichment
Updated n/a
ENISA EUVD
EUVD-2013-1068 Assigner apple
Published Sep 16, 2013
Updated Aug 6, 2024
Exploited since n/a
Link EUVD-2013-1068