Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2011-3253
cve-2011-3253
caldav
apple ios
ssl
man-in-the-middle
spoofing
certificate validation
2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:N/A:N
5.3 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
40.3%
CalDAV in Apple iOS before 5 does not validate X.509 certificates for SSL sessions, which allows man-in-the-middle attackers to spoof calendar servers and obtain sensitive information via an arbitrary certificate.
Affected configurations
Node
appleiphone_osMatch3.0-iphone
ORappleiphone_osMatch3.1
ORappleiphone_osMatch3.1-iphone
ORappleiphone_osMatch3.1-ipodtouch
ORappleiphone_osMatch3.1.2-iphone
ORappleiphone_osMatch3.1.3-iphone
ORappleiphone_osMatch3.2-iphone
ORappleiphone_osMatch3.2-ipodtouch
ORappleiphone_osMatch3.2.1
ORappleiphone_osMatch3.2.1-ipad
ORappleiphone_osMatch3.2.2
ORappleiphone_osMatch4.0
ORappleiphone_osMatch4.0-iphone
ORappleiphone_osMatch4.0-ipodtouch
ORappleiphone_osMatch4.0.1
ORappleiphone_osMatch4.0.1-iphone
ORappleiphone_osMatch4.0.1-ipodtouch
ORappleiphone_osMatch4.0.2
ORappleiphone_osMatch4.1
ORappleiphone_osMatch4.2.1
ORappleiphone_osMatch4.2.5
ORappleiphone_osMatch4.2.8
ORappleiphone_osMatch4.3.0
ORappleiphone_osMatch4.3.1
ORappleiphone_osMatch4.3.2
ORappleiphone_osMatch4.3.3
ORappleiphone_osMatch4.3.5
ORappleiphone_osMatch4.3.5-ipad
ORappleiphone_osMatch4.3.5-ipodtouch
Related
nvd
nvd
CVE-2011-3253
2011-10-14 10:55:09
prion
prion
Design/Logic Flaw
2011-10-14 10:55:00
cvelist
cvelist
CVE-2011-3253
2022-10-03 16:15:07
nessus
nessus
Apple iOS < 5.0 Multiple Vulnerabilities (BEAST)
2012-06-19 00:00:00
securityvulns
securityvulns
APPLE-SA-2011-10-12-1 iOS 5 Software Update
2011-10-15 00:00:00
Apple iPhone multiple security vulnerabilities
2011-10-16 00:00:00
2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:N/A:N
5.3 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
40.3%
Related for CVE-2011-3253