Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Certificate Assistant in Apple Mac OS X before 10.6.2 does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apple Mac OS X "Certificate Assistant" 中间人攻击漏洞
Vulnerability Description
Mac OS X是苹果家族机器所使用的操作系统。 Apple 2009-006安全更新修复了Mac OS X中的多个安全漏洞，本地或远程攻击者可能利用这些漏洞导致拒绝服务、读取敏感信息或执行任意代码。 在处理CN字段中包含有空字符的SSL证书时存在错误，用户可能被误导接受外观类似于匹配用户所访问域的特制证书。
CVSS Information
N/A
Vulnerability Type
N/A