Total vulnerabilities in the database
Address Book in Apple Mac OS X before 10.7.3 automatically switches to unencrypted sessions upon failure of encrypted connections, which allows remote attackers to read CardDAV data by terminating an encrypted connection and then sniffing the network.
| Software | From | Fixed in |
|---|---|---|
| apple / mac_os_x_server | - | 10.7.2.x |
| apple / mac_os_x_server | 10.7.1 | 10.7.1.x |
| apple / mac_os_x_server | 10.7.0 | 10.7.0.x |
| apple / mac_os_x | 10.7.0 | 10.7.0.x |
| apple / mac_os_x | - | 10.7.2.x |
| apple / mac_os_x | 10.7.1 | 10.7.1.x |