CVE Vulnerabilities

CVE-2014-1266

Improper Certificate Validation

Published: Feb 22, 2014 | Modified: Feb 09, 2024
CVSS 3.x
7.4
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS 2.x
5.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

The SSLVerifySignedServerKeyExchange function in libsecurity_ssl/lib/sslKeyExchange.c in the Secure Transport feature in the Data Security component in Apple iOS 6.x before 6.1.6 and 7.x before 7.0.6, Apple TV 6.x before 6.0.2, and Apple OS X 10.9.x before 10.9.2 does not check the signature in a TLS Server Key Exchange message, which allows man-in-the-middle attackers to spoof SSL servers by (1) using an arbitrary private key for the signing step or (2) omitting the signing step.

Weakness

The product does not validate, or incorrectly validates, a certificate.

Affected Software

Name Vendor Start Version End Version
Iphone_os Apple 6.0 (including) 6.1.6 (excluding)
Iphone_os Apple 7.0 (including) 7.0.6 (excluding)
Mac_os_x Apple 10.9 (including) 10.9.2 (excluding)
Tvos Apple 6.0 (including) 6.0.2 (excluding)

Potential Mitigations

References