CVE-2007-3754
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
6.1 Medium
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
75.4%
Mail in Apple iPhone 1.1.1, when using SSL, does not warn the user when the mail server changes or is not trusted, which might allow remote attackers to steal credentials and read email via a man-in-the-middle (MITM) attack.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| apple:iphone | apple iphone | eq | 1.0 |
| apple:iphone_os | apple iphone os | eq | 1.0.1 |
| apple:iphone_os | apple iphone os | eq | 1.0.2 |
References
docs.info.apple.com/article.html?artnum=306586
lists.apple.com/archives/security-announce/2007/Sep/msg00001.html
osvdb.org/38537
secunia.com/advisories/26983
securitytracker.com/id?1018752
www.securityfocus.com/bid/25856
www.vupen.com/english/advisories/2007/3287
exchange.xforce.ibmcloud.com/vulnerabilities/36845
Related
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
6.1 Medium
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
75.4%