Apple Mac OS X Certificate Trust Policy EV Certificate Security Bypass Vulnerability

Bugtraq ID:	48447
Class:	Design Error
CVE:	CVE-2011-0199
Remote:	Yes
Local:	No
Published:	Jun 23 2011 12:00AM
Updated:	Jun 23 2011 12:00AM
Credit:	Chris Hawk and Wan-Teh Chang of Google
Vulnerable:	Apple Mac OS X Server 10.6.6 Apple Mac OS X Server 10.6.5 Apple Mac OS X Server 10.6.5 Apple Mac OS X Server 10.6.4 Apple Mac OS X Server 10.6.3 Apple Mac OS X Server 10.6.2 Apple Mac OS X Server 10.6.1 Apple Mac OS X Server 10.6.7 Apple Mac OS X Server 10.6 Apple Mac OS X 10.6.6 Apple Mac OS X 10.6.5 Apple Mac OS X 10.6.5 Apple Mac OS X 10.6.4 Apple Mac OS X 10.6.3 Apple Mac OS X 10.6.2 Apple Mac OS X 10.6.1 Apple Mac OS X 10.6.7 Apple Mac OS X 10.6
Not Vulnerable:	Apple Mac OS X Server 10.6.8 Apple Mac OS X 10.6.8

Apple Mac OS X Certificate Trust Policy EV Certificate Security Bypass Vulnerability

Apple Mac OS X is prone to a security-bypass vulnerability in the Certificate Trust Policy.

An attacker can exploit this issue to bypass security restrictions and use a revoked certificate. This may allow attackers to gain access to sensitive information or perform other attacks.

NOTE: This issue was previously discussed in BID 48412 (Apple Mac OS X Prior to 10.6.8 Multiple Security Vulnerabilities) but has been given its own record to better document it.

Apple Mac OS X Certificate Trust Policy EV Certificate Security Bypass Vulnerability

An attacker can exploit this issue through man-in-the-middle attacks.

Apple Mac OS X Certificate Trust Policy EV Certificate Security Bypass Vulnerability

Solution:
Vendor updates are available. Please see the references for more information.


Apple Mac OS X 10.6.7

• Apple MacOSXUpd10.6.8.dmg
  For Mac OS X v10.6.7
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.6

• Apple MacOSXServerUpdCombo10.6.8.dmg
  For Mac OS X Server v10.6 - v10.6.6
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.6

• Apple MacOSXUpdCombo10.6.8.dmg
  For Mac OS X v10.6 - v10.6.6
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.6.7

• Apple MacOSXServerUpd10.6.8.dmg
  For Mac OS X Server v10.6.7
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.6.1

• Apple MacOSXServerUpdCombo10.6.8.dmg
  For Mac OS X Server v10.6 - v10.6.6
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.6.1

• Apple MacOSXUpdCombo10.6.8.dmg
  For Mac OS X v10.6 - v10.6.6
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.6.2

• Apple MacOSXUpdCombo10.6.8.dmg
  For Mac OS X v10.6 - v10.6.6
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.6.2

• Apple MacOSXServerUpdCombo10.6.8.dmg
  For Mac OS X Server v10.6 - v10.6.6
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.6.3

• Apple MacOSXUpdCombo10.6.8.dmg
  For Mac OS X v10.6 - v10.6.6
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.6.3

• Apple MacOSXServerUpdCombo10.6.8.dmg
  For Mac OS X Server v10.6 - v10.6.6
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.6.4

• Apple MacOSXUpdCombo10.6.8.dmg
  For Mac OS X v10.6 - v10.6.6
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.6.4

• Apple MacOSXServerUpdCombo10.6.8.dmg
  For Mac OS X Server v10.6 - v10.6.6
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.6.5

• Apple MacOSXServerUpdCombo10.6.8.dmg
  For Mac OS X Server v10.6 - v10.6.6
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.6.5

• Apple MacOSXUpdCombo10.6.8.dmg
  For Mac OS X v10.6 - v10.6.6
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.6.5

• Apple MacOSXServerUpdCombo10.6.8.dmg
  For Mac OS X Server v10.6 - v10.6.6
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.6.5

• Apple MacOSXUpdCombo10.6.8.dmg
  For Mac OS X v10.6 - v10.6.6
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.6.6

• Apple MacOSXUpdCombo10.6.8.dmg
  For Mac OS X v10.6 - v10.6.6
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.6.6

• Apple MacOSXServerUpdCombo10.6.8.dmg
  For Mac OS X Server v10.6 - v10.6.6
  http://www.apple.com/support/downloads/

Apple Mac OS X Certificate Trust Policy EV Certificate Security Bypass Vulnerability

References:

• Mac OS X Homepage (Apple)