Lucene search

[email protected]CVE-2011-3429

HistoryOct 14, 2011 - 10:55 a.m.

CVE-2011-3429

2011-10-1410:55:10

CWE-255

[email protected]

web.nvd.nist.gov

apple

ios

cve-2011-3429

security

information security

vulnerability

cleartext

parental restrictions

passcode

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

5.1 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.1%

JSON

The Settings component in Apple iOS before 5 stores a cleartext parental-restrictions passcode in an unspecified file, which might allow physically proximate attackers to obtain sensitive information by reading this file.

Affected configurations

NVD

Node

appleiphone_osMatch3.0-iphone

appleiphone_osMatch3.1

appleiphone_osMatch3.1-iphone

appleiphone_osMatch3.1-ipodtouch

appleiphone_osMatch3.1.2-iphone

appleiphone_osMatch3.1.3-iphone

appleiphone_osMatch3.2-iphone

appleiphone_osMatch3.2-ipodtouch

appleiphone_osMatch3.2.1

appleiphone_osMatch3.2.1-ipad

appleiphone_osMatch3.2.2

appleiphone_osMatch4.0

appleiphone_osMatch4.0-iphone

appleiphone_osMatch4.0-ipodtouch

appleiphone_osMatch4.0.1

appleiphone_osMatch4.0.1-iphone

appleiphone_osMatch4.0.1-ipodtouch

appleiphone_osMatch4.0.2

appleiphone_osMatch4.1

appleiphone_osMatch4.2.1

appleiphone_osMatch4.2.5

appleiphone_osMatch4.2.8

appleiphone_osMatch4.3.0

appleiphone_osMatch4.3.1

appleiphone_osMatch4.3.2

appleiphone_osMatch4.3.3

appleiphone_osMatch4.3.5

appleiphone_osMatch4.3.5-ipad

appleiphone_osMatch4.3.5-ipodtouch

CPENameOperatorVersion
apple:iphone_osapple iphone oseq3.0
apple:iphone_osapple iphone oseq3.1
apple:iphone_osapple iphone oseq3.1.2
apple:iphone_osapple iphone oseq3.1.3
apple:iphone_osapple iphone oseq3.2
apple:iphone_osapple iphone oseq3.2.1
apple:iphone_osapple iphone oseq3.2.2
apple:iphone_osapple iphone oseq4.0
apple:iphone_osapple iphone oseq4.0.1
apple:iphone_osapple iphone oseq4.0.2

CPE	Name	Operator	Version
apple:iphone_os	apple iphone os	eq	3.0
apple:iphone_os	apple iphone os	eq	3.1
apple:iphone_os	apple iphone os	eq	3.1.2
apple:iphone_os	apple iphone os	eq	3.1.3
apple:iphone_os	apple iphone os	eq	3.2
apple:iphone_os	apple iphone os	eq	3.2.1
apple:iphone_os	apple iphone os	eq	3.2.2
apple:iphone_os	apple iphone os	eq	4.0
apple:iphone_os	apple iphone os	eq	4.0.1
apple:iphone_os	apple iphone os	eq	4.0.2

Rows per page:

1-10 of 191

References

lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html

osvdb.org/76331

support.apple.com/kb/HT4999

exchange.xforce.ibmcloud.com/vulnerabilities/70559

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

5.1 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.1%

JSON

Related for CVE-2011-3429

cvelist1 prion1 nvd1 securityvulns2