Lucene search
+L

36 matches found

Prion
Prion
•added 2010/11/26 8:00 p.m.•38 views

Design/Logic Flaw

Photos in Apple iOS before 4.2 enables support for HTTP Basic Authentication over an unencrypted connection, which allows man-in-the-middle attackers to read MobileMe account passwords by spoofing a MobileMe Gallery server during a "Send to MobileMe" action...

4.3CVSS5.9AI score0.01079EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
•added 2010/11/26 7:00 p.m.•46 views

CVE-2010-3831

Photos in Apple iOS before 4.2 enables support for HTTP Basic Authentication over an unencrypted connection, which allows man-in-the-middle attackers to read MobileMe account passwords by spoofing a MobileMe Gallery server during a "Send to MobileMe" action...

5.6AI score0.01079EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/11/26 12:00 a.m.•4 views

CVE-2010-3831: Exposure of Sensitive Information to an Unauthorized Actor

Photos in Apple iOS before 4.2 enables support for HTTP Basic Authentication over an unencrypted connection, which allows man-in-the-middle attackers to read MobileMe account passwords by spoofing a MobileMe Gallery server during a "Send to MobileMe" action...

4.3CVSS5.8AI score0.01079EPSS
SaveExploits0References2
NVD
NVD
•added 2010/06/22 8:30 p.m.•31 views

CVE-2010-1754

Passcode Lock in Apple iOS before 4 on the iPhone and iPod touch does not properly handle alert-based unlocks in conjunction with subsequent Remote Lock operations through MobileMe, which allows physically proximate attackers to bypass intended passcode requirements via unspecified vectors...

6.9CVSS5.8AI score0.00363EPSS
SaveExploits0References4
Prion
Prion
•added 2010/06/22 8:30 p.m.•32 views

Design/Logic Flaw

Passcode Lock in Apple iOS before 4 on the iPhone and iPod touch does not properly handle alert-based unlocks in conjunction with subsequent Remote Lock operations through MobileMe, which allows physically proximate attackers to bypass intended passcode requirements via unspecified vectors...

6.9CVSS6.2AI score0.00363EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2010/06/22 8:24 p.m.•37 views

CVE-2010-1754

Passcode Lock in Apple iOS before 4 on the iPhone and iPod touch does not properly handle alert-based unlocks in conjunction with subsequent Remote Lock operations through MobileMe, which allows physically proximate attackers to bypass intended passcode requirements via unspecified vectors...

5.8AI score0.00363EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/06/22 12:00 a.m.•5 views

CVE-2010-1754: Undefined Security Weakness

Passcode Lock in Apple iOS before 4 on the iPhone and iPod touch does not properly handle alert-based unlocks in conjunction with subsequent Remote Lock operations through MobileMe, which allows physically proximate attackers to bypass intended passcode requirements via unspecified vectors...

6.9CVSS5.8AI score0.00363EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2010/06/22 12:00 a.m.•17 views

PT-2010-3392 · Apple · Mobileme +1

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 4 Description: The issue concerns the Passcode Lock feature in Apple iOS, which fails to properly handle alert-based unlocks in conjunction with subsequent Remote Lock operations through MobileMe. This allows...

6.9CVSS5.9AI score0.00363EPSS
SaveExploits0References5
OpenVAS
OpenVAS
•added 2010/05/12 12:00 a.m.•68 views

Mac OS X 10.5.8 Update / Mac OS X Security Update 2009-003

The remote host is missing Mac OS X 10.5.8 Update / Mac OS X Security Update 2009-003. One or more of the following components are affected: bzip2 CFNetwork ColorSync CoreTypes Dock Image RAW ImageIO Kernel launchd Login Window MobileMe Networking XQuery OpenVAS Vulnerability Test Mac OS X 10.5.8...

10CVSS0.3AI score0.09454EPSS
SaveExploits6
attackerkb
attackerkb
•added 2009/08/06 4:30 p.m.•7 views

CVE-2009-2192

MobileMe in Apple Mac OS X 10.5 before 10.5.8 does not properly delete credentials upon signout from the preference pane, which makes it easier for attackers to hijack a MobileMe session via unspecified vectors, related to a "logic issue."...

7.5CVSS5.5AI score0.02511EPSS
SaveExploits1References9
NVD
NVD
•added 2009/08/06 4:30 p.m.•30 views

CVE-2009-2192

MobileMe in Apple Mac OS X 10.5 before 10.5.8 does not properly delete credentials upon signout from the preference pane, which makes it easier for attackers to hijack a MobileMe session via unspecified vectors, related to a "logic issue."...

7.5CVSS6AI score0.02511EPSS
SaveExploits1References8
Prion
Prion
•added 2009/08/06 4:30 p.m.•33 views

Design/Logic Flaw

MobileMe in Apple Mac OS X 10.5 before 10.5.8 does not properly delete credentials upon signout from the preference pane, which makes it easier for attackers to hijack a MobileMe session via unspecified vectors, related to a "logic issue."...

7.5CVSS6.4AI score0.02511EPSS
SaveExploits1References8Affected Software2
Cvelist
Cvelist
•added 2009/08/06 4:00 p.m.•50 views

CVE-2009-2192

MobileMe in Apple Mac OS X 10.5 before 10.5.8 does not properly delete credentials upon signout from the preference pane, which makes it easier for attackers to hijack a MobileMe session via unspecified vectors, related to a "logic issue."...

5.9AI score0.02511EPSS
SaveExploits1References8
CVE
CVE
•added 2009/08/06 4:00 p.m.•74 views

CVE-2009-2192

The CVE-2009-2192 issue affects Mac OS X 10.5 prior to 10.5.8, where the MobileMe preference pane fails to delete all credentials on sign-out due to a logic issue. This could allow continued access to a MobileMe account after sign-out. Connected sources (OpenVAS/NVD-family entries) confirm that t...

7.5CVSS6AI score0.02511EPSS
SaveExploits1References8Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/08/06 12:00 a.m.•5 views

CVE-2009-2192: Undefined Security Weakness

MobileMe in Apple Mac OS X 10.5 before 10.5.8 does not properly delete credentials upon signout from the preference pane, which makes it easier for attackers to hijack a MobileMe session via unspecified vectors, related to a "logic issue."...

7.5CVSS5.9AI score0.02511EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2009/08/05 12:00 a.m.•66 views

Mac OS X 10.5.x < 10.5.8 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.5.x that is prior to 10.5.8. Mac OS X 10.5.8 contains security fixes for the following products : - bzip2 - CFNetwork - ColorSync - CoreTypes - Dock - Image RAW - ImageIO - Kernel - launchd - Login Window - MobileMe - Networking - XQuery C Tenab...

10CVSS8.2AI score0.09454EPSS
SaveExploits6References20
Rows per page
Query Builder