CVE-2011-3427

CVE-2011-3427 describes a vulnerability in Apple iOS before version 5 and Apple TV before 4.4, where the Data Security component inadequately restricts the use of the MD5 hash algorithm in X.509 certificates. This flaw facilitates man-in-the-middle attacks, enabling attackers to spoof servers or intercept sensitive information through specially crafted certificates. The vulnerability has a CVSS score of 2.6, indicating low severity, with a network attack vector and high attack complexity, potentially leading to partial confidentiality impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.