CVE-2009-3273

CVE-2009-3273 affects iPhone Mail on Apple iPhone OS and iPhone OS for iPod touch. The issue is that these clients do not validate X.509 certificates, enabling a man-in-the-middle to spoof arbitrary SSL email servers with a crafted certificate. The NVD entry lists a base score of 7.5 (HIGH) with ...