me, 2.0: OS X bug published

me, 2.0: jose nazario beauty and the street

OS X bug published

it's been a few years since i had a CVE entry published. i found more bugs in private than i can recall, some with security implications. not all were acknowledged in the CVE repository, however.

Security Framework
CVE-ID: CVE-2006-4410

Available for: Mac OS X v10.3.9, Mac OS X Server v10.3.9

Impact: Certain revoked certificates may be erroneously honored

Description: The revocation list from an issuing authority may not be consulted for certain leaf certificates. This update addresses the issue through improved handling of the certificate revocation list. This issue does not affect Mac OS X v10.4.7 and later systems. Credit to Jose Nazario of Arbor Networks for reporting this issue.

full set of nov, 2006, patches from apple for OS X: Security Update 2006-007

next Friday, Dec 01, 2006 @ 09:16pm | previous Thursday, Nov 16, 2006 @ 10:49pm | archives

Last modified: Tuesday, Nov 28, 2006 @ 09:26pm

Your Ad Here