Apple Mac OS X Keychain Certificate Settings Security Bypass Vulnerability

Bugtraq ID:	49429
Class:	Design Error
CVE:	CVE-2011-3422
Remote:	Yes
Local:	No
Published:	Sep 02 2011 12:00AM
Updated:	Mar 19 2015 09:40AM
Credit:	<br>Ryan Sleevi
Vulnerable:	Apple Mac OS X Server 10.6.6 Apple Mac OS X Server 10.6.5 Apple Mac OS X Server 10.6.4 Apple Mac OS X Server 10.6.3 Apple Mac OS X Server 10.6.2 Apple Mac OS X Server 10.6.1 Apple Mac Os X Server 10.7.2 Apple Mac Os X Server 10.7.1 Apple Mac Os X Server 10.7 Apple Mac Os X Server 10.6.8 Apple Mac Os X Server 10.6.7 Apple Mac OS X Server 10.6 Apple Mac OS X 10.6.5 Apple Mac OS X 10.6.4 Apple Mac OS X 10.6.3 Apple Mac OS X 10.6.2 Apple Mac OS X 10.6.1 Apple Mac Os X 10.7.2 Apple Mac Os X 10.7.1 Apple Mac OS X 10.6
Not Vulnerable:	Apple Mac Os X Server 10.7.3 Apple Mac Os X 10.7.3

Apple Mac OS X Keychain Certificate Settings Security Bypass Vulnerability

Apple Mac OS X is prone to a security-bypass vulnerability in the Certificate Trust Policy.

An attacker can exploit this issue to bypass the KeyChain security settings.

Mac OS X 10.6.8 and prior are vulnerable.

Apple Mac OS X Keychain Certificate Settings Security Bypass Vulnerability

An attacker can exploit this issue through man-in-the-middle attacks.

Apple Mac OS X Keychain Certificate Settings Security Bypass Vulnerability

Solution:
Updates are available. Please see the references for more information.


Apple Mac OS X 10.6.8

• Apple SecUpd2012-001Snow.dmg
  For Mac OS X v10.6.8
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.7.2

• Apple MacOSXServerUpd10.7.3.dmg
  For OS X Lion Server v10.7.2
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.6.8

• Apple SecUpdSrvr2012-001.dmg
  For Mac OS X Server v10.6.8
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.7.1

• Apple MacOSXUpdCombo10.7.3.dmg
  For OS X Lion v10.7 and v10.7.1
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.7.2

• Apple MacOSXUpd10.7.3.dmg
  For OS X Lion v10.7.2
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.7.1

• Apple MacOSXServerUpdCombo10.7.3.dmg
  For OS X Lion Server v10.7 and v10.7.1
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.7

• Apple MacOSXServerUpdCombo10.7.3.dmg
  For OS X Lion Server v10.7 and v10.7.1
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.7

• Apple MacOSXUpdCombo10.7.3.dmg
  For OS X Lion v10.7 and v10.7.1
  http://www.apple.com/support/downloads/

Apple Mac OS X Keychain Certificate Settings Security Bypass Vulnerability

References:

• Mac OS X Homepage (Apple)
  
• Mac OS X Keychain Certificate Settings Can Be Bypassed By Remote Users (Ryan Sleevi)