The most succinct description of Apple's SSL bug [web.nvd.nist.gov] I've seen.