← Database

CVE-2006-4409

MEDIUM CVSS: 5.0 Published: 2006-11-30 Modified: 2026-06-16

Description

The Online Certificate Status Protocol (OCSP) service in the Security Framework in Apple Mac OS X 10.4 through 10.4.8 retrieve certificate revocation lists (CRL) when an HTTP proxy is in use, which could cause the system to accept certificates that have been revoked.

Affected Platforms

Apple Mac Os X

Weakness Type

NVD-CWE-Other

References