CVE-2009-2794

🗓️ 10 Sep 2009 21:30:01Reported by [email protected]Type

The Exchange Support component in Apple iPhone OS before 3.1 and iPhone OS before 3.1.1 for iPod touch does not properly implement the "Maximum inactivity time lock" functionality, allowing local users to bypass intended Microsoft Exchange restrictions by choosing a large Require Passcode time value

Reporter	Title	Published	Views	Family All 5
Tenable Nessus	Apple iOS 3.x < 3.1 Multiple Vulnerabilities	10 Sep 200900:00	–	nessus
CVE	CVE-2009-2794	10 Sep 200921:00	–	cve
Cvelist	CVE-2009-2794	10 Sep 200921:00	–	cvelist
EUVD	EUVD-2009-2784	7 Oct 202500:30	–	euvd
Prion	Code injection	10 Sep 200921:30	–	prion

NVD

Node

apple iphone_osMatch2.0

apple iphone_osMatch2.0.0-ipodtouch

apple iphone_osMatch2.0.1

apple iphone_osMatch2.0.1-ipodtouch

apple iphone_osMatch2.0.2

apple iphone_osMatch2.0.2-ipodtouch

apple iphone_osMatch2.1

apple iphone_osMatch2.1-ipodtouch

apple iphone_osMatch2.1.1

apple iphone_osMatch2.2

apple iphone_osMatch2.2-ipodtouch

apple iphone_osMatch2.2.1

apple iphone_osMatch2.2.1-ipodtouch

apple iphone_osMatch3.0

apple iphone_osMatch3.0-ipodtouch

apple iphone_osMatch3.0.1

Source	Link
support	www.support.apple.com/kb/HT3860
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/53181
secunia	www.secunia.com/advisories/36677
lists	www.lists.apple.com/archives/security-announce/2009/Sep/msg00001.html
securityfocus	www.securityfocus.com/bid/36342

16 Jun 2026 23:10Current

5.8Medium risk

Vulners AI Score5.8

CVSS 24.6

EPSS0.00258

CWE-362