Lucene search
HistorySep 21, 2009 - 7:30 p.m.
CVE-2009-3273
iphone
mail
apple
iphone os
x.509 certificates
man-in-the-middle
ssl
email
servers
security vulnerability
cve-2009-3273
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6 Medium
AI Score
Confidence
Low
0.0005 Low
EPSS
Percentile
18.8%
iPhone Mail in Apple iPhone OS, and iPhone OS for iPod touch, does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL e-mail servers via a crafted certificate.
Affected configurations
Node
appleiphone_osMatch1.0
ORappleiphone_osMatch1.0.0
ORappleiphone_osMatch1.0.1
ORappleiphone_osMatch1.0.1-iphone
ORappleiphone_osMatch1.0.2
ORappleiphone_osMatch1.0.2-iphone
ORappleiphone_osMatch1.1
ORappleiphone_osMatch1.1.0
ORappleiphone_osMatch1.1.0-iphone
ORappleiphone_osMatch1.1.0-ipodtouch
ORappleiphone_osMatch1.1.1
ORappleiphone_osMatch1.1.1-iphone
ORappleiphone_osMatch1.1.2
ORappleiphone_osMatch1.1.2-iphone
ORappleiphone_osMatch1.1.2-ipodtouch
ORappleiphone_osMatch1.1.3
ORappleiphone_osMatch1.1.3-iphone
ORappleiphone_osMatch1.1.3-ipodtouch
ORappleiphone_osMatch1.1.4
ORappleiphone_osMatch1.1.4-iphone
ORappleiphone_osMatch1.1.4-ipodtouch
ORappleiphone_osMatch1.1.5
ORappleiphone_osMatch1.1.5-iphone
ORappleiphone_osMatch1.1.5-ipodtouch
ORappleiphone_osMatch2.0
ORappleiphone_osMatch2.0.0
ORappleiphone_osMatch2.0.0-iphone
ORappleiphone_osMatch2.0.0-ipodtouch
ORappleiphone_osMatch2.0.1
ORappleiphone_osMatch2.0.1-iphone
ORappleiphone_osMatch2.0.1-ipodtouch
ORappleiphone_osMatch2.0.2
ORappleiphone_osMatch2.0.2-iphone
ORappleiphone_osMatch2.0.2-ipodtouch
ORappleiphone_osMatch2.1
ORappleiphone_osMatch2.1-iphone
ORappleiphone_osMatch2.1-ipodtouch
ORappleiphone_osMatch2.1.1
ORappleiphone_osMatch2.2
ORappleiphone_osMatch2.2-iphone
ORappleiphone_osMatch2.2-ipodtouch
ORappleiphone_osMatch2.2.1
ORappleiphone_osMatch2.2.1-iphone
ORappleiphone_osMatch2.2.1-ipodtouch
ORappleiphone_osMatch3.0
ORappleiphone_osMatch3.0-ipodtouch
ORappleiphone_osMatch3.0.1
ORappleiphone_osMatch3.0.1-iphone
Related
prion
prion
Design/Logic Flaw
2009-09-21 19:30:00
nvd
nvd
CVE-2009-3273
2009-09-21 19:30:00
cvelist
cvelist
CVE-2009-3273
2009-09-21 19:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6 Medium
AI Score
Confidence
Low
0.0005 Low
EPSS
Percentile
18.8%
Related for CVE-2009-3273