cbcvebase.
CVE-2009-3455
published 2009-09-29

CVE-2009-3455: Apple Safari, possibly before 4.0.3, on Mac OS X does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509…

PriorityP430high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
0.58%
44.2th percentile
Apple Safari, possibly before 4.0.3, on Mac OS X does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

Affected

40 ranges· showing 25
VendorProductVersion rangeFixed in
applesafari<= 4.0.2—
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.