The File Systems component in Apple Mac OS X before 10.7.2 does not properly track the specific X.509 certificate that a user manually accepted for an initial https WebDAV connection, which allows man-in-the-middle attackers to hijack WebDAV communication by presenting an arbitrary certificate for a subsequent connection.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published: 2011-10-14T10:00:00

Updated: 2024-08-06T23:29:55.994Z

Reserved: 2011-08-19T00:00:00

Link: CVE-2011-3213

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2011-10-14T10:55:08.387

Modified: 2012-01-14T03:55:33.400

Link: CVE-2011-3213

cve-icon Redhat

No data.