RETIRED: Apple iPhone and iPod touch Prior to Version 3.0 Multiple Vulnerabilities
BID:35414
Info
RETIRED: Apple iPhone and iPod touch Prior to Version 3.0 Multiple Vulnerabilities
| Bugtraq ID: | 35414 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Jun 17 2009 12:00AM |
| Updated: | Jun 19 2009 11:09PM |
| Credit: | FD of Securus Global; Ronald C.F. Antony of Cubiculum Systems; Stefan Seiz of ERNI Electronics GmbH; Oskar Lissheim-Boethius of iPhone development house OLB Productions; Meyer Consulting; Oliver Quas; Christian Schmitz of MonkeybreadSoftware; Thomas Adams |
| Vulnerable: |
Apple iPod Touch 2.2.1 Apple iPod Touch 2.0.2 Apple iPod Touch 2.0.1 Apple iPod Touch 1.1.4 Apple iPod Touch 1.1.3 Apple iPod Touch 1.1.2 Apple iPod Touch 1.1.1 Apple iPod Touch 2.2 Apple iPod Touch 2.1 Apple iPod Touch 2.0 Apple iPod Touch 1.1 Apple iPod Touch 0 Apple iPhone 2.2.1 Apple iPhone 2.0.2 Apple iPhone 2.0.1 Apple iPhone 1.1.4 Apple iPhone 1.1.3 Apple iPhone 1.1.2 Apple iPhone 1.1.1 Apple iPhone 1.0.2 Apple iPhone 1.0.1 Apple iPhone 2.2 Apple iPhone 2.1 Apple iPhone 2.0 Apple iPhone 1.1 Apple iPhone 1 Apple iPhone 0 |
| Not Vulnerable: |
Apple iPod Touch 3.0 Apple iPhone 3.0 |
Discussion
RETIRED: Apple iPhone and iPod touch Prior to Version 3.0 Multiple Vulnerabilities
Apple iPhone and iPod touch are prone to multiple vulnerabilities.
Successfully exploiting these issues may allow attackers to bypass security restrictions, obtain sensitive information, or cause denial-of-service conditions.
These issues affect the following:
iPhone OS 1.0 through 2.2.1
iPhone OS for iPod touch 1.1 through 2.2.1
This BID is being retired. The following individual records have been created to better document these issues:
35433 Apple iPhone and iPod touch MPEG-4 Video Codec Denial of Service Vulnerability
35434 Apple iPhone and iPod touch Mail Client Information Disclosure Weakness
35436 Apple iPhone and iPod touch Configuration Profile Handling Information Disclosure Vulnerability
35425 Apple iPhone Call Approval Dialog Security Bypass Vulnerability
35445 Apple iPhone and iPod touch ICMP Echo Request Remote Denial of Service Vulnerability
35446 Apple iPhone and iPod touch HTMLSelectElement Denial of Service Vulnerability
35447 Apple iPhone and iPod touch Untrusted Certificate Exception Information Disclosure Vulnerability
35448 Apple iPhone and iPod touch Safari Search History Information Disclosure Vulnerability
Apple iPhone and iPod touch are prone to multiple vulnerabilities.
Successfully exploiting these issues may allow attackers to bypass security restrictions, obtain sensitive information, or cause denial-of-service conditions.
These issues affect the following:
iPhone OS 1.0 through 2.2.1
iPhone OS for iPod touch 1.1 through 2.2.1
This BID is being retired. The following individual records have been created to better document these issues:
35433 Apple iPhone and iPod touch MPEG-4 Video Codec Denial of Service Vulnerability
35434 Apple iPhone and iPod touch Mail Client Information Disclosure Weakness
35436 Apple iPhone and iPod touch Configuration Profile Handling Information Disclosure Vulnerability
35425 Apple iPhone Call Approval Dialog Security Bypass Vulnerability
35445 Apple iPhone and iPod touch ICMP Echo Request Remote Denial of Service Vulnerability
35446 Apple iPhone and iPod touch HTMLSelectElement Denial of Service Vulnerability
35447 Apple iPhone and iPod touch Untrusted Certificate Exception Information Disclosure Vulnerability
35448 Apple iPhone and iPod touch Safari Search History Information Disclosure Vulnerability
Exploit / POC
RETIRED: Apple iPhone and iPod touch Prior to Version 3.0 Multiple Vulnerabilities
Some of these issues may not require specific exploit code and may be trivial to exploit.
Currently we are not aware of any working exploits for issues that may require exploit code. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Some of these issues may not require specific exploit code and may be trivial to exploit.
Currently we are not aware of any working exploits for issues that may require exploit code. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
RETIRED: Apple iPhone and iPod touch Prior to Version 3.0 Multiple Vulnerabilities
Solution:
The vendor has released an advisory and fixes. Please see the references for details.
Solution:
The vendor has released an advisory and fixes. Please see the references for details.
References
RETIRED: Apple iPhone and iPod touch Prior to Version 3.0 Multiple Vulnerabilities
References:
References:
- About the security content of iPhone OS 3.0 Software Update (Apple)
- iPhone Product Page (Apple)
- iPod touch Product Page (Apple)