CVE-2010-1378

published 2010-11-15

CVE-2010-1378: OpenSSL in Apple Mac OS X 10.6.x before 10.6.5 does not properly perform arithmetic, which allows remote attackers to bypass X.509 certificate authentication…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

OpenSSL in Apple Mac OS X 10.6.x before 10.6.5 does not properly perform arithmetic, which allows remote attackers to bypass X.509 certificate authentication via an arbitrary certificate issued by a legitimate Certification Authority.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
apple	mac_os_x	>= 10.6.0 < 10.6.5	10.6.5
apple	mac_os_x_server	>= 10.6.0 < 10.6.5	10.6.5
debian	openssl	—	—

CWE-295