CVE-2011-3444
Last modified
CVE-2011-3444 is a vulnerability of currently unknown severity. Address Book in Apple Mac OS X before 10.7.3 automatically switches to unencrypted sessions upon failure of encrypted connections, which allows remote attackers to read CardDAV data by terminating an encrypted connection and then sniffing the network.. EPSS estimates a 1.44% chance of exploitation in the next 30 days.
Description
Address Book in Apple Mac OS X before 10.7.3 automatically switches to unencrypted sessions upon failure of encrypted connections, which allows remote attackers to read CardDAV data by terminating an encrypted connection and then sniffing the network.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Apple | Mac Os X | <= 10.7.2 |
| Apple | Mac Os X | 10.7.0 |
| Apple | Mac Os X | 10.7.1 |
| Apple | Mac Os X Server | <= 10.7.2 |
| Apple | Mac Os X Server | 10.7.0 |
| Apple | Mac Os X Server | 10.7.1 |
References
- http://support.apple.com/kb/HT5130Vendor Advisory
- http://support.apple.com/kb/HT5130Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2011-3444?
How severe is CVE-2011-3444?
How do I fix CVE-2011-3444?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2011
- CVE-2011-3438WebKit, as used in Safari 5.0.6, allows remote attackers to …
- CVE-2011-3439FreeType in CoreGraphics in Apple iOS before 5.0.1 allows re…
- CVE-2011-3440The Passcode Lock feature in Apple iOS before 5.0.1 on the i…
- CVE-2011-3441libinfo in Apple iOS before 5.0.1 does not properly formulat…
- CVE-2011-3442The kernel in Apple iOS before 5.0.1 does not ensure the val…
- CVE-2011-3443Use-after-free vulnerability in WebKit, as used in Apple Saf…
- CVE-2011-3445Rejected reason: This candidate is unused by its CNA.
- CVE-2011-3446Apple Type Services (ATS) in Apple Mac OS X before 10.7.3 do…
- CVE-2011-3447CFNetwork in Apple Mac OS X 10.7.x before 10.7.3 does not pr…
- CVE-2011-3448Heap-based buffer overflow in CoreMedia in Apple Mac OS X be…
- CVE-2011-3449Use-after-free vulnerability in CoreText in Apple Mac OS X b…
- CVE-2011-3450CoreUI in Apple Mac OS X 10.7.x before 10.7.3 does not prope…
Are you affected by CVE-2011-3444?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST