CVE-2011-3444 — Apple MAC OS X vulnerability

CWE-3103 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
0.2%
top 53.37%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Apple MAC OS XApple MAC OS X Server
Timeline
PublishedFeb 2
Latest updateMay 17

Description

Address Book in Apple Mac OS X before 10.7.3 automatically switches to unencrypted sessions upon failure of encrypted connections, which allows remote attackers to read CardDAV data by terminating an encrypted connection and then sniffing the network.

CVSS vector

AV:N/AC:M/C:P/I:N/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages2 packages

▶NVDapple/mac_os_x10.7.2+2
▶NVDapple/mac_os_x_server10.7.2+2

🔴Vulnerability Details

2
GHSA
GHSA-3v44-m29v-5rc5: Address Book in Apple Mac OS X before 10↗2022-05-17
▶
CVEList
CVE-2011-3444: Address Book in Apple Mac OS X before 10↗2012-02-02
▶
CVE-2011-3444 — Apple MAC OS X vulnerability | cvebase