CVE-2014-1266

The SSLVerifySignedServerKeyExchange function in libsecurity_ssl/lib/sslKeyExchange.c in the Secure Transport feature in the Data Security component in Apple iOS 6.x before 6.1.6 and 7.x before 7.0.6, Apple TV 6.x before 6.0.2, and Apple OS X 10.9.x before 10.9.2 does not check the signature in a TLS Server Key Exchange message, which allows man-in-the-middle attackers to spoof SSL servers by (1) using an arbitrary private key for the signing step or (2) omitting the signing step.

CVSS v3.1

7.4 HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CVSS v2.0

5.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:N

EPSS

5.71% chance of exploitation in the next 30 days, 92th percentile

Published

2014-02-22

Updated

2024-08-06

Proof-of-concept exploits (3)

• gabrielg/CVE-2014-1266-poc78★ · 2014-02-25
• landonf/Testability-CVE-2014-126626★ · 2014-02-22
• meetlight942/PentesterLab-Intercept-CVE-2014-12660★ · 2024-07-18

References

• CVE Record
• NVD entry

Related

• CVE-2014-125128
• CVE-2014-1287
• CVE-2014-125127
• CVE-2014-1303
• CVE-2014-125126
• CVE-2014-1322