Block Screen capture option in MDX policies for IOS devices

Question : Block Screen capture option is not available in SecureMail MDX policies for IOS devices. Answer :​ Block screen capture option is available only on Android and not on iOS. Any option which is not available under MDX policies is by default On. Hence the Screen capture/snapshots will be...

Bypass iCloud/Activation Lock using XenMobile

An end user may return an iOS device to the I.T. department and does not supply their iCloud account information. After a restore, the I.T. department cannot enroll the device as the device cannot be unlocked without iCloud credentials. XenMobile can issue a 'Activation Bypass Code' as per Apple...

Policies and Applications are not pushing to iOS devices from Xenmobile (Proxy Enabled Environment)

The device information is not fetched completely on XenMobile and under device setting on XenMobile console we don't see any assigned delivery group. The test connectivity is successful In the Debug logs you can see : | ERROR | pool-47-thread-1 | com.notnoop.apns.internal.ApnsConnectionImpl |...

After updating the app, receiving an error : Incompatible error

After updating the app Secure Mail, receiving an error when launching apps. Devices: iOS only ERROR: "Incompatible app, please try removing this app and then reinstalling it."...

XenMobile : Control OS update policy FAQ

Control OS policy The Control OS Updates device policy lets you deploy the latest OS updates to supervised iOS devices. You can specify how frequently XenMobile checks the device OS and deploys updates. ​There are two options -: 1. Download Only This option will just download OSupdate and custome...

WebKit memory corruption vulnerability in multiple Apple products (CNVD-2017-16613)

Apple iOS, iCloud for Windows, iTunes for Windows, Safari, and tvOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser included with the Mac OS X and iOS operating systems. WebKit is an open source web...

XenMobile Policy State Pending or Failed for iOS Devices

This purpose of this article is to help XenMobile administrator troubleshoot issues related to iOS policy deployment failures and also provide additional information on settings up XenMobile server with right values...

XenMobile not renewing Device Identify Cert automatically on iOS devices

The device identity certificates apple profile, apple mdm , ios agent that are pushed from the Xenmobile is valid from the date of enrollment for 2 years . The certificate shouldrenew automatically. However these three certificates are not renewed and hence the device becomes unamanaged and all...

Secure Hub Error: Request Failed on iOS devices

This article explains how to troubleshoot the errorRequest Failed on iOS devices when we have cert+LDAP policy on Netscaler Gateway Below error in the iOS Secure Hub logs indicates that the issue is because two factors Authentication is disabled. ,,ERROR...

Troubleshooting Secure Mail Issues with iOS Push Notifications

This article discusses how to diagnose and fix issues related to Secure Mail push notifications on iOS devices. Background Push notifications for Secure Mail allow users to receive updates when the app refreshes, and notifications about email and calendar activitythrough the Apple Push Notificati...

[ASA-201701-34] libimobiledevice: access restriction bypass

Arch Linux Security Advisory ASA-201701-34 ========================================== Severity: Medium Date : 2017-01-27 CVE-ID : CVE-2016-5104 Package : libimobiledevice Type : access restriction bypass Remote : Yes Link : https://security.archlinux.org/AVG-8 Summary ======= The package...

XenMobile: Error during enrollment "could not connect to the server"

During the enrollment for IOS devices you receive the error "Could not connect to the server " during the installation of the Profiles. In the XMS Server debug logs we would see: "UserDeviceLimitExceededException"...

Emergency iOS Update Patches Zero Days Used by Government Spyware

Apple rushed an emergency iOS update today after the discovery of three zero-day vulnerabilities used by governments to spy on the activities of human rights activists and journalists. The zero days, called Trident, allow an attacker to take complete control of an iPhone or iPad with just one...

Ubuntu 14.04 LTS / 16.04 LTS : libimobiledevice vulnerability (USN-3026-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3026-1 advisory. It was discovered that libimobiledevice incorrectly handled socket permissions. A remote attacker could use this issue to access services on iOS...

Ubuntu 16.04 LTS : libusbmuxd vulnerability (USN-3026-2)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3026-2 advisory. It was discovered that libusbmuxd incorrectly handled socket permissions. A remote attacker could use this issue to access services on iOS devices, contrary to...

Ubuntu: Security Advisory (USN-3026-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-3026-2: libusbmuxd vulnerability

It was discovered that libusbmuxd incorrectly handled socket permissions. A remote attacker could use this issue to access services on iOS devices, contrary to expectations...

USN-3026-1: libimobiledevice vulnerability

It was discovered that libimobiledevice incorrectly handled socket permissions. A remote attacker could use this issue to access services on iOS devices, contrary to expectations...

CVE-2016-5104

The socketcreate function in common/socket.c in libimobiledevice and libusbmuxd allows remote attackers to bypass intended access restrictions and communicate with services on iOS devices by connecting to an IPv4 TCP socket...

Design/Logic Flaw

The socketcreate function in common/socket.c in libimobiledevice and libusbmuxd allows remote attackers to bypass intended access restrictions and communicate with services on iOS devices by connecting to an IPv4 TCP socket...