Facebook for iPhone multiple security vulnerabilities

Crosste scripting via notes page, session hijacking...

e-Sentinel Security Advisory - Ref: Session Hijacking iPhone Facebook Application ver 3.1.2

Tested on iPhone firmware version 3.1.2 Facebook App version 3.1.2 Impact It is possible to usurp valid session IDs in order to gain unauthorised access to facebook profiles. At greatest risk are those handset that have been jailbroken. Description Using known vulnerabilities and exploits to gain...

Apple iPhone / iPod My DBLite Edition Denial Of Service

!/usr/bin/python Apple Iphone/Ipod - My DBLite Edition Remote 0day DOS exploit Found by: Jason Bowes - admin @ blue-dogz.com App Homepage: www.xenugo.co Price: Free Download: From the app store use your itunes account Tested on: Iphone 3GS - firmware 3.1.2 What's up to slicc1 Advisory: print "+...

iOS My DBLite Edition - Remote Denial of Service

!/usr/bin/python Apple Iphone/Ipod - My DBLite Edition Remote 0day DOS exploit Found by: Jason Bowes - admin @ blue-dogz.com App Homepage: www.xenugo.co Price: Free Download: From the app store use your itunes account Tested on: Iphone 3GS - firmware 3.1.2 What's up to slicc1 Advisory: print "+...

iOS FTP On The Go 2.1.2 - HTTP Remote Denial of Service

!/usr/bin/python Apple Iphone/Ipod - FTP On The Go 2.1.2 - HTTP Remote Denial-of-Service Attack Found by: TecR0c Homepage: http://www.ftponthego.com/ Download: From the Apple App Store - http://app2.it/topapp/286479936 Tested on: IPhone 3G - firmware 3.1.2 Notified vendor about vulnerability...

Apple Iphone/Ipod - My DBLite Edition Remote 0day DOS Exploit

Exploit for unknown platform in category dos / poc ============================================================= Apple Iphone/Ipod - My DBLite Edition Remote 0day DOS Exploit ============================================================= !/usr/bin/python Apple Iphone/Ipod - My DBLite Edition Remot...

Apple Iphone/Ipod - FTP On The Go 2.1.2 - HTTP Remote DoS

Exploit for unknown platform in category dos / poc ========================================================= Apple Iphone/Ipod - FTP On The Go 2.1.2 - HTTP Remote DoS ========================================================= !/usr/bin/python Apple Iphone/Ipod - FTP On The Go 2.1.2 - HTTP Remote...

Fake Apple Phish Scam Targets iPhone Users

iPhone users beware – an ongoing phishing campaign impersonating Apple.com, attempts to trick users into submitting sensitive device information, with the scammers in a perfect position to use the data in a countless number of fraudulent variations. Read the full article. ZDNet...

On the Latest iPhone Attack, Patch Tuesday and More Fallout from Google

Dennis Fisher and Ryan Naraine discuss the latest iPhone attack, the upcoming Patch Tuesday and the never-ending fallout from the Google attack. SHOW NOTES iPhones Vulnerable to New Remote Attack Microsoft to Patch 26 Windows, Office Vulnerabilities Google Attack Was Tip of the Iceberg Subscribe ...

Apple iPhone cryptographic weakness

Certificate key usage is not checked during validation of .mobileconfig wireless autoconfiguration file...

Apple iPhone OS USB控制消息信息泄露漏洞

BUGTRAQ ID: 38040 CVE ID: CVE-2010-0038 iPhone OS是苹果iPhone智能手机和iPod touch播放器所使用的操作系统。 在处理某些USB控制消息时存在内存破坏漏洞，能够物理访问设备的用户可以绕过通行码验证访问用户数据。 Apple iPhone OS 1.1 - 3.1.2 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.apple.com...

iPhone certificate flaws

iPhones can be configured over the air by inviting users to download .mobileconfig files from a URL. This feature is used by large companies and universities to distribute various settings to a large number of iPhones. For security reasons, these files need to be cryptographically signed to be...

Apple Releases iPhone OS 3.1.3 and iPhone OS 3.1.3 for iPod touch

Apple has released iPhone OS 3.1.3 and iPhone OS 3.1.3 for iPod touch to address vulnerabilities in the CoreAudio, ImageIO, Recovery Mode and WebKit packages. Exploitation of these vulnerabilities may allow an attacker to execute arbitrary code, cause a denial-of-service condition, or obtain...

Design/Logic Flaw

FreeBit ServersMan 3.1.5 on Apple iPhone OS 3.1.2, and iPhone OS for iPod touch, allows remote attackers to cause a denial of service daemon crash via a HEAD request for the / URI...

Memory corruption

Recovery Mode in Apple iPhone OS 1.0 through 3.1.2, and iPhone OS for iPod touch 1.1 through 3.1.2, allows physically proximate attackers to bypass device locking, and read or modify arbitrary data, via a USB control message that triggers memory corruption...

CVE-2010-0038

Recovery Mode in Apple iPhone OS 1.0 through 3.1.2, and iPhone OS for iPod touch 1.1 through 3.1.2, allows physically proximate attackers to bypass device locking, and read or modify arbitrary data, via a USB control message that triggers memory corruption...

CVE-2010-0496

FreeBit ServersMan 3.1.5 on Apple iPhone OS 3.1.2, and iPhone OS for iPod touch, allows remote attackers to cause a denial of service daemon crash via a HEAD request for the / URI...

CVE-2010-0038

Recovery Mode in Apple iPhone OS 1.0 through 3.1.2, and iPhone OS for iPod touch 1.1 through 3.1.2, allows physically proximate attackers to bypass device locking, and read or modify arbitrary data, via a USB control message that triggers memory corruption...

CVE-2010-0496

FreeBit ServersMan 3.1.5 on Apple iPhone OS 3.1.2, and iPhone OS for iPod touch, allows remote attackers to cause a denial of service daemon crash via a HEAD request for the / URI...

CVE-2010-0496

CVE-2010-0496 affects FreeBit ServersMan 3.1.5 on Apple iPhone OS 3.1.2 and iPhone OS for iPod touch. The vulnerability allows a remote attacker to cause a denial of service (daemon crash) by sending a HEAD request to the root URI ( / ). The public description specifies a network-accessible trigg...