Lucene search
MitreCVE-2008-4230HistoryNov 25, 2008 - 11:30 p.m.
CVE-2008-4230
2008-11-2523:30:00
CWE-264
CWE-200
mitre
web.nvd.nist.gov
27
passcode lock
apple iphone os
ipod touch
sms
emergency-call screen
sensitive information
cve-2008-4230
CVSS2
1.9
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:N/A:N
AI Score
5.5
Confidence
Low
EPSS
0.001
Percentile
26.1%
The Passcode Lock feature in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 displays SMS messages when the emergency-call screen is visible, which allows physically proximate attackers to obtain sensitive information by reading these messages. NOTE: this might be a duplicate of CVE-2008-4593.
Affected configurations
Node
appleipod_touch
ORappleiphone_os
appleiphone_osMatch1.0
ORappleiphone_osMatch1.0.1
ORappleiphone_osMatch1.0.2
ORappleiphone_osMatch1.1
ORappleiphone_osMatch1.1.1
ORappleiphone_osMatch1.1.2
ORappleiphone_osMatch1.1.3
ORappleiphone_osMatch1.1.4
ORappleiphone_osMatch1.1.5
ORappleiphone_osMatch2.0
ORappleiphone_osMatch2.0.1
ORappleiphone_osMatch2.0.2
ORappleiphone_osMatch2.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| apple | ipod_touch | * | cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:* |
| apple | iphone_os | * | cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* |
| apple | iphone_os | 1.0 | cpe:2.3:o:apple:iphone_os:1.0:*:*:*:*:*:*:* |
| apple | iphone_os | 1.0.1 | cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:* |
| apple | iphone_os | 1.0.2 | cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:* |
| apple | iphone_os | 1.1 | cpe:2.3:o:apple:iphone_os:1.1:*:*:*:*:*:*:* |
| apple | iphone_os | 1.1.1 | cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:* |
| apple | iphone_os | 1.1.2 | cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:* |
| apple | iphone_os | 1.1.3 | cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:* |
| apple | iphone_os | 1.1.4 | cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:* |
Related
prion
prion
Design/Logic Flaw
2008-11-25 23:30:00
Code injection
2008-10-17 20:33:00
cvelist
cvelist
CVE-2008-4230
2008-11-25 23:00:00
CVE-2008-4593
2008-10-17 20:00:00
nvd
nvd
CVE-2008-4230
2008-11-25 23:30:00
CVE-2008-4593
2008-10-17 20:33:55
cve
cve
CVE-2008-4593
2008-10-17 20:33:55
CVSS2
1.9
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:N/A:N
AI Score
5.5
Confidence
Low
EPSS
0.001
Percentile
26.1%
Related for CVE-2008-4230