PT-2007-4995 · Apple · Iphone

Publicado 2007-09-27 · Atualizado 2022-08-09 · CVE-2007-3754

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple iPhone version 1.1.1

Description The issue allows remote attackers to steal credentials and read email via a man-in-the-middle (MITM) attack because Mail in Apple iPhone does not warn the user when the mail server changes or is not trusted while using SSL.

Recommendations For Apple iPhone version 1.1.1, consider disabling SSL connections to mail servers until a patch is available, and restrict access to sensitive email accounts to minimize the risk of exploitation.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2007-3754

Produtos afetados

Iphone

Referências · 9

• http://securityfocus.com/bid/25856 · Nota
• http://osvdb.org/38537 · Nota
• http://lists.apple.com/archives/security-announce/2007/Sep/msg00001.html · Correção, Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36845 · Nota
• http://securitytracker.com/id?1018752 · Nota
• http://vupen.com/english/advisories/2007/3287 · Nota
• http://docs.info.apple.com/article.html?artnum=306586 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-3754 · Nota de Segurança
• http://secunia.com/advisories/26983 · Nota