CVE-2010-1378 describes a critical vulnerability in OpenSSL within Apple Mac OS X 10.6.x before 10.6.5, allowing remote attackers to bypass X.509 certificate authentication due to improper arithmetic. This flaw has a CVSS score of 9.8 (Critical), indicating a network-exploitable vulnerability with low attack complexity that could lead to complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, with 11 mentions, suggesting a high level of awareness among security researchers. Despite its age and lack of KEV listing, its critical severity and the potential for authentication bypass highlight its historical significance.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 10.6.0, < 10.6.5CPE matchmatch criteria | cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* | ||
>= 10.6.0, < 10.6.5CPE matchmatch criteria | cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.