Design/Logic Flaw

2009-09-2119:30:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

18.8%

JSON

iPhone Mail in Apple iPhone OS, and iPhone OS for iPod touch, does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL e-mail servers via a crafted certificate.

CPENameOperatorVersion
iphone_oseq2.0.2 ipodtouch
iphone_oseq3.0
iphone_oseq1.0.2
iphone_oseq1.0
iphone_oseq1.1.2 ipodtouch
iphone_oseq2.2
iphone_oseq1.1.4 iphone
iphone_oseq1.1.1 iphone
iphone_oseq3.0.1 iphone
iphone_oseq1.1.1

Name	Operator	Version
iphone_os	eq	2.0.2 ipodtouch
iphone_os	eq	3.0
iphone_os	eq	1.0.2
iphone_os	eq	1.0
iphone_os	eq	1.1.2 ipodtouch
iphone_os	eq	2.2
iphone_os	eq	1.1.4 iphone
iphone_os	eq	1.1.1 iphone
iphone_os	eq	3.0.1 iphone
iphone_os	eq	1.1.1