ONEDC For iOS X.509 Certificate Validation Security Bypass Vulnerability
BID:64558
Info
ONEDC For iOS X.509 Certificate Validation Security Bypass Vulnerability
| Bugtraq ID: | 64558 |
| Class: | Unknown |
| CVE: |
CVE-2013-6812 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 19 2013 12:00AM |
| Updated: | Dec 19 2013 12:00AM |
| Credit: | NEXTDC |
| Vulnerable: |
NEXTDC ONEDC 1.6 |
| Not Vulnerable: |
NEXTDC ONEDC 1.7 |
Exploit / POC
ONEDC For iOS X.509 Certificate Validation Security Bypass Vulnerability
An attacker can use readily available network utilities to exploit this issue.
An attacker can use readily available network utilities to exploit this issue.
Solution / Fix
ONEDC For iOS X.509 Certificate Validation Security Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
ONEDC For iOS X.509 Certificate Validation Security Bypass Vulnerability
References:
References:
- ONEDC for iPhone (NextDC)
- ONEDC Homepage (NextDC)