← Database

CVE-2010-1377

CRITICAL CVSS: 9.3 Published: 2010-06-17 Modified: 2026-06-16

Description

Open Directory in Apple Mac OS X 10.6 before 10.6.4 creates an unencrypted connection upon certain SSL failures, which allows man-in-the-middle attackers to spoof arbitrary network account servers, and possibly execute arbitrary code, via unspecified vectors.

Affected Platforms

Apple Mac Os X ServerApple Mac Os X

Weakness Type

CWE-310

References