← Back

CVE-2007-4680

nvd nist
Published: Nov 15, 2007Modified: Apr 23, 2026

JSON object

Loading...
6.8
Vector
AV:N/AC:M/Au:N/C:P/I:P/A:P
Exploitability: 8.6 / Impact: 6.4
Source: NVD

Description

CFNetwork in Apple Mac OS X 10.3.9 and 10.4 through 10.4.10 does not properly validate certificates, which allows remote attackers to spoof trusted SSL certificates via a man-in-the-middle attack.

Affected (9)

Products: Apple: Mac Os X
Apple
1 product
Mac Os X
Configuration A
9 vulnerable · 15 platform
Vulnerable SoftwareAffected Versions
Apple
Mac Os X
Version 10.4.1
Mac Os X
Version 10.4.2
Mac Os X
Version 10.4.3
Mac Os X
Version 10.4.4
Mac Os X
Version 10.4.5
Mac Os X
Version 10.4.6
Mac Os X
Version 10.4.7
Mac Os X
Version 10.4.8
Mac Os X
Version 10.4.9
Running on/withPlatform Versions
Apple
Mac Os X
Up to 10.4.10
Apple
Mac Os X
Version 10.3.9
Apple
Mac Os X
Version 10.4
Apple
Mac Os X Server
Version 10.3.9
Apple
Mac Os X Server
Version 10.4.10
Apple
Mac Os X Server
Version 10.4.1
Apple
Mac Os X Server
Version 10.4.2
Apple
Mac Os X Server
Version 10.4.3
Apple
Mac Os X Server
Version 10.4.4
Apple
Mac Os X Server
Version 10.4.5
Apple
Mac Os X Server
Version 10.4.6
Apple
Mac Os X Server
Version 10.4.7
Apple
Mac Os X Server
Version 10.4.8
Apple
Mac Os X Server
Version 10.4.9
Apple
Mac Os X Server
Version 10.4

Related CWEs

CWE-287
Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (20)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Patch
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
US Government Resource
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.