CVE-2009-1723
06.08.2009, 15:30
CFNetwork in Apple Mac OS X 10.5 before 10.5.8 places an incorrect URL in a certificate warning in certain 302 redirection scenarios, which makes it easier for remote attackers to trick a user into visiting an arbitrary https web site by leveraging an open redirect vulnerability, a different issue than CVE-2009-2062.Enginsight
| Vendor | Product | Version |
|---|---|---|
| apple | mac_os_x | 10.5.6 |
| apple | mac_os_x | 10.5 |
| apple | mac_os_x | 10.5.0 |
| apple | mac_os_x | 10.5.1 |
| apple | mac_os_x | 10.5.2 |
| apple | mac_os_x | 10.5.2:2008-002 |
| apple | mac_os_x | 10.5.3 |
| apple | mac_os_x | 10.5.4 |
| apple | mac_os_x | 10.5.5 |
| apple | mac_os_x | 10.5.6 |
| apple | mac_os_x | 10.5.7 |
| apple | mac_os_x_server | 10.5 |
| apple | mac_os_x_server | 10.5.0 |
| apple | mac_os_x_server | 10.5.1 |
| apple | mac_os_x_server | 10.5.2 |
| apple | mac_os_x_server | 10.5.3 |
| apple | mac_os_x_server | 10.5.4 |
| apple | mac_os_x_server | 10.5.5 |
| apple | mac_os_x_server | 10.5.6 |
| apple | mac_os_x_server | 10.5.7 |
𝑥
= Vulnerable software versions
References