CVE-2011-3444

No fix known EPSS 1%

Address Book in Apple Mac OS X before 10.7.3 automatically switches to unencrypted sessions upon failure of encrypted connections, which allows remote attackers to read CardDAV data by terminating an encrypted connection and then sniffing the network.

Published 2012-02-02 · CVE record · OSV

Products: apple mac_os_x, apple mac_os_x_server