← Database

CVE-2007-4680

MEDIUM CVSS: 6.8 Published: 2007-11-15 Modified: 2026-06-16

Description

CFNetwork in Apple Mac OS X 10.3.9 and 10.4 through 10.4.10 does not properly validate certificates, which allows remote attackers to spoof trusted SSL certificates via a man-in-the-middle attack.

Affected Platforms

Apple Mac Os X ServerApple Mac Os X

Weakness Type

CWE-287

References