Description
CFNetwork in Apple Mac OS X 10.6.3 and 10.6.4 supports anonymous SSL and TLS connections, which allows man-in-the-middle attackers to redirect a connection and obtain sensitive information via crafted responses.
References
- 1024359 vdb-entry
- APPLE-SA-2010-08-24-1 vendor-advisory
- http://support.apple.com/kb/HT4312