Apple iOS "basicConstraints" X.509证书链验证漏洞

CVE ID: CVE-2011-0228 Apple iOS是运行在苹果iPhone和iPod touch设备上的最新的操作系统。 Apple iOS "basicConstraints" X.509在在实现上存在欺骗漏洞，远程用户可利用此漏洞执行欺骗攻击。 此漏洞源于在验证证书链中的证书"basicConstraints"参数时存在错误，通过中间人攻击，可欺骗任意域中的证书并泄露加密信息。 Apple iOS 4.x 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://support.apple.com/...

TWSL2011-007: iOS SSL Implementation Does Not Validate Certificate Chain

Trustwave's SpiderLabs Security Advisory TWSL2011-007: iOS SSL Implementation Does Not Validate Certificate Chain https://www.trustwave.com/spiderlabs/advisories/TWSL2011-007.txt Published: 2011-07-25 Version: 1.0 Vendor: Apple http://www.apple.com Product: iOS Version affected: Versions Prior to...

Apple Releases iOS 4.3.3, Addressing Location-Tracking Concerns

Apple has released iOS 4.3.3, a firmware update for the iPhone, iPod Touch and iPad that, among other things, fixes the controversial issues surrounding the location tracking capabilities of those devices. The firmware update is Apple’s response to the outcry that erupted last month when a pair o...

Xilisoft iPod Magique 3.0.2 <= DLL Hijacking Exploit

Exploit for windows platform in category local exploits Exploit Title: Xilisoft iPod Magique 3.0.2 Special Greets To : KedAns-Dz & All Algerians Hackers Vulnerable extensions:...

VUPEN Security Research - Apple Safari Text Nodes Remote Use-after-free Vulnerability &#40;CVE-2011-1344&#41;

VUPEN Security Research - Apple Safari Text Nodes Remote Use-after-free Vulnerability CVE-2011-1344 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Apple Safari is a web browser developed by Apple. As of February 2010, Safari was the fourth most widely used browser,...

iDefense Security Advisory 03.21.11: Apple OfficeImport Framework Excel Memory Corruption Vulnerability

iDefense Security Advisory 03.21.11 http://labs.idefense.com/intelligence/vulnerabilities/ Mar 21, 2011 I. BACKGROUND The OfficeImport framework is an API used by Apple's mobile devices, including the iPod Touch, iPhone, and iPad. The framework is used to parse and display Microsoft Office file...

Checkview 1.1 For iPhone / iPod Touch Directory Traversal

Exploit Title: checkviewÃ¥ºä v1.1 for iPhone / iPod touch, Directory Traversal Date: 03/14/2011 Author: kim@story E-Mail : kimastory at gmail dot com Twitter : http://twitter.com/kimastory Software Link: http://itunes.apple.com/En/app/id381116321 Version: 1.1 Tested on: iPhone, iPod 3GS with 4.2....

checkview v1.1 for iPhone / iPod Touch Directory Traversal

Exploit for windows platform in category remote exploits Exploit Title: checkviewÃ¥ºä v1.1 for iPhone / iPod touch, Directory Traversal Date: 03/14/2011 Author: email protected E-Mail : kimastory at gmail dot com Twitter : http://twitter.com/kimastory Software Link:...

iOS Checkview 1.1 - Directory Traversal

iOS Checkview 1.1 - Directory Traversal Exploit Title: checkviewÃ¥ºä v1.1 for iPhone / iPod touch, Directory Traversal Date: 03/14/2011 Author: kim@story E-Mail : kimastory at gmail dot com Twitter : http://twitter.com/kimastory Software Link: http://itunes.apple.com/En/app/id381116321 Version: 1...

Apple Releases iOS 4.3

Apple has released iOS 4.3 for the iPhone 3 GS and later, iPod touch 3rd generation and later, and iPad to address multiple vulnerabilities. These vulnerabilities affect the CoreGraphics, ImageIO, libxml, Networking, Safari, and WebKit packages. Exploitation of these vulnerabilities may allow an...

iFileExplorer Free Directory Traversal

Exploit Title: iPod Touch/iPhone iFileExplorer Free Directory Traversal Date: 04/03/2011 UK date format Author: theSmallNothing Software Link: http://itunes.apple.com/gb/app/ifileexplorer-protect-multi/id355253462?mt=8 Version: 2.8 Tested on: iPod Touch 2G 4.1 import urllib, sqlite3 base =...

iPod Touch/iPhone iFileExplorer Free Directory Traversal

Exploit for hardware platform in category remote exploits Exploit Title: iPod Touch/iPhone iFileExplorer Free Directory Traversal Date: 04/03/2011 UK date format Author: theSmallNothing Software Link: http://itunes.apple.com/gb/app/ifileexplorer-protect-multi/id355253462?mt=8 Version: 2.8 Tested...

iPhone / iPod touch TIOD v1. 3. 3 directory traversal vulnerability-vulnerability warning-the black bar safety net

TIOD is an iPhone / iPod touch remote directory browsing software of. TIOD v1. 3 There is a directory traversal vulnerability that could lead to sensitive information disclosure. +info: Exploit Title: TIOD v1. 3. 3 for iPhone / iPod touch, Directory Traversal Date: 03/03/2011 Author: R3d@l3rt,...

TIOD v1.3.3 for iPhone / iPod touch Directory Traversal

Exploit for hardware platform in category remote exploits Exploit Title: TIOD v1.3.3 for iPhone / iPod touch, Directory Traversal Date: 03/03/2011 Author: email protected, email protected E-Mail : R3dal3rt.team at gmail dot com Twitter : http://twitter.com/R3dAl3rtTeam Software Link:...

iOS iFileExplorer Free - Directory Traversal

iOS iFileExplorer Free - Directory Traversal Exploit Title: iPod Touch/iPhone iFileExplorer Free Directory Traversal Date: 04/03/2011 UK date format Author: theSmallNothing Software Link: http://itunes.apple.com/gb/app/ifileexplorer-protect-multi/id355253462?mt=8 Version: 2.8 Tested on: iPod Touc...

iOS iFileExplorer Free - Directory Traversal

Exploit Title: iPod Touch/iPhone iFileExplorer Free Directory Traversal Date: 04/03/2011 UK date format Author: theSmallNothing Software Link: http://itunes.apple.com/gb/app/ifileexplorer-protect-multi/id355253462?mt=8 Version: 2.8 Tested on: iPod Touch 2G 4.1 import urllib, sqlite3 base =...

iOS TIOD 1.3.3 - Directory Traversal

iOS TIOD 1.3.3 - Directory Traversal Exploit Title: TIOD v1.3.3 for iPhone / iPod touch, Directory Traversal Date: 03/03/2011 Author: R3d@l3rt, H@ckk3y E-Mail : R3dal3rt.team at gmail dot com Twitter : http://twitter.com/R3dAl3rtTeam Software Link:...

TIOD 1.3.3 For iPhone / iPod Touch Directory Traversal

Exploit Title: TIOD v1.3.3 for iPhone / iPod touch, Directory Traversal Date: 03/03/2011 Author: R3d@l3rt, H@ckk3y E-Mail : R3dal3rt.team at gmail dot com Twitter : http://twitter.com/R3dAl3rtTeam Software Link: http://itunes.apple.com/kr/app/idocmanager/id404412400?mt=8 Version: 1.3.3 Tested on:...

iOS TIOD 1.3.3 - Directory Traversal

Exploit Title: TIOD v1.3.3 for iPhone / iPod touch, Directory Traversal Date: 03/03/2011 Author: R3d@l3rt, H@ckk3y E-Mail : R3dal3rt.team at gmail dot com Twitter : http://twitter.com/R3dAl3rtTeam Software Link: http://itunes.apple.com/kr/app/idocmanager/id404412400?mt=8 Version: 1.3.3 Tested on:...

myDBLite v1.1.10 for iPhone / iPod touch, Directory Traversal

Exploit for hardware platform in category remote exploits Exploit Title : myDBLite v1.1.10 for iPhone / iPod touch, Directory Traversal Date: 02/24/2011 Author: email protected, email protected, email protected, Sunlight, email protected Software Link:...