libsecurity in Apple Mac OS X before 10.7.4 does not properly restrict the length of RSA keys within X.509 certificates, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by conducting a spoofing or network-sniffing attack during communication with a site that uses a short key.
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: apple

Published: 2012-05-11T01:00:00

Updated: 2017-12-04T18:57:01

Reserved: 2012-01-12T00:00:00


Link: CVE-2012-0655

JSON object: View

cve-icon NVD Information

Status : Modified

Published: 2012-05-11T03:49:58.933

Modified: 2017-12-05T02:29:02.903


Link: CVE-2012-0655

JSON object: View

cve-icon Redhat Information

No data.

CWE