Lucene search
HistorySep 10, 2009 - 9:30 p.m.
CVE-2009-2796
apple
iphone
security
vulnerability
password discovery
nvd
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
6.3 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
25.7%
The UIKit component in Apple iPhone OS 3.0, and iPhone OS 3.0.1 for iPod touch, allows physically proximate attackers to discover a password by watching a user undo deletions of characters in the password.
Affected configurations
Node
appleiphone_osMatch3.0
ORappleiphone_osMatch3.0.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| apple:iphone_os | apple iphone os | eq | 3.0 |
| apple:iphone_os | apple iphone os | eq | 3.0.1 |
Related
prion
prion
Default credentials
2009-09-10 21:30:00
cvelist
cvelist
CVE-2009-2796
2009-09-10 21:00:00
nvd
nvd
CVE-2009-2796
2009-09-10 21:30:01
nessus
nessus
Apple iOS 3.x < 3.1 Multiple Vulnerabilities
2009-09-10 00:00:00
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
6.3 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
25.7%
Related for CVE-2009-2796