Apple Safari CVE-2015-1129 SSL Certificate Verification Security Bypass Vulnerability
BID:73976
Info
Apple Safari CVE-2015-1129 SSL Certificate Verification Security Bypass Vulnerability
| Bugtraq ID: | 73976 |
| Class: | Design Error |
| CVE: |
CVE-2015-1129 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 08 2015 12:00AM |
| Updated: | Nov 03 2015 07:42PM |
| Credit: | Stefan Kraus of fluid Operations AG and Sylvain Munaut of Whatever s.a. |
| Vulnerable: |
Apple Safari 5.0.6 Apple Safari 4.0.5 Apple Safari 4.0.4 Apple Safari 4.0.3 Apple Safari 4.0.2 Apple Safari 4.0.1 Apple Safari 3.2.3 Apple Safari 3.1.2 Apple Safari 3.1.1 Apple Safari 2.0.4 Apple Safari 2.0.3 Apple Safari 2.0.2 Apple Safari 2.0.1 Apple Safari 1.3.2 Apple Safari 1.3.1 Apple Safari 1.3 Apple Safari 1.2.3 Apple Safari 1.2.2 Apple Safari 1.2.1 Apple Safari 1.2 Apple Safari 1.1 Apple Safari 1.0 Apple Safari 5.1.7 Apple Safari 5.1.4 Apple Safari 5.1.1 Apple Safari 5.1 Apple Safari 5.0.5 Apple Safari 5.0.4 Apple Safari 5.0.3 Apple Safari 5.0.2 Apple Safari 5.0.1 Apple Safari 5.0 Apple Safari 4.1.3 Apple Safari 4.1.2 Apple Safari 4.1.1 Apple Safari 4.1 Apple Safari 4.0 Apple Safari 4 Apple Safari 3.2 Apple Safari 3.1 Apple Safari 3 Apple iOS 4.2.1 Apple iOS 4.0.2 Apple iOS 4.0.1 Apple iOS 3.2.2 Apple iOS 3.2.1 Apple iOS 5.1.1 Apple iOS 5.1 Apple iOS 5.0.1 Apple iOS 5 Apple iOS 4.3.5 Apple iOS 4.3.4 Apple iOS 4.3 Apple iOS 4.2.9 Apple iOS 4.2.8 Apple iOS 4.2.7 Apple iOS 4.2.6 Apple iOS 4.2.5 Apple iOS 4.2.10 Apple iOS 4.2 Apple iOS 4.1 Apple iOS 4 Apple iOS 3.2 Apple iOS 3.1 Apple iOS 3.0 Apple iOS 2.1 Apple iOS 2.0 |
| Not Vulnerable: | |
Discussion
Apple Safari CVE-2015-1129 SSL Certificate Verification Security Bypass Vulnerability
Apple Safari is prone to a security-bypass vulnerability.
Successfully exploiting this issue allows attackers to perform man-in-the-middle attacks or impersonate trusted servers, which will aid in further attacks.
Apple Safari is prone to a security-bypass vulnerability.
Successfully exploiting this issue allows attackers to perform man-in-the-middle attacks or impersonate trusted servers, which will aid in further attacks.
Exploit / POC
Apple Safari CVE-2015-1129 SSL Certificate Verification Security Bypass Vulnerability
An attacker can use readily available tools to exploit this issue.
An attacker can use readily available tools to exploit this issue.
Solution / Fix
Apple Safari CVE-2015-1129 SSL Certificate Verification Security Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Apple Safari CVE-2015-1129 SSL Certificate Verification Security Bypass Vulnerability
References:
References:
- Mac OS X Homepage (Apple)
- Safari Homepage (Apple)