Apple iPhone/iPod touch Prior to iOS 4 Wireless Network Security Weakness

Bugtraq ID:	41048
Class:	Design Error
CVE:	CVE-2010-1756
Remote:	Yes
Local:	No
Published:	Jun 21 2010 12:00AM
Updated:	Jun 21 2010 12:00AM
Credit:	Wilfried Teiken
Vulnerable:	Apple iPod Touch 3.1.3 Apple iPod Touch 3.1.2 Apple iPod Touch 3.1.1 Apple iPod Touch 2.2.1 Apple iPod Touch 2.0.2 Apple iPod Touch 2.0.1 Apple iPod Touch 3.0 Apple iPod Touch 2.2 Apple iPod Touch 2.1 Apple iPod Touch 2.0 Apple iPod Touch 0 Apple iPhone 3.1.3 Apple iPhone 3.1.2 Apple iPhone 3.0.1 Apple iPhone 2.2.1 Apple iPhone 2.0.2 Apple iPhone 2.0.1 Apple iPhone 3.1 Apple iPhone 3.0 Apple iPhone 2.2 Apple iPhone 2.1 Apple iPhone 2.0 Apple iPhone 0
Not Vulnerable:	Apple iOS 4

Apple iPhone/iPod touch Prior to iOS 4 Wireless Network Security Weakness

Apple iOS for iPhone and iPod touch is prone to a weakness that may display the wrong currently active wireless network.

This may lead to a false sense of security, which may aid in further attacks.

NOTE: This BID was previously covered in BID 41016 (Apple iPhone/iPod touch Prior to iOS 4 Multiple Vulnerabilities) but has been given its own record to better document it.

Versions prior to iOS 4 are vulnerable.

Apple iPhone/iPod touch Prior to iOS 4 Wireless Network Security Weakness

This issue is due to a design error in the Settings application, and does not require specific exploit code.

Apple iPhone/iPod touch Prior to iOS 4 Wireless Network Security Weakness

References:

• iOS Homepage (Apple)
  
• iPhone Product Page (Apple)
  
• iPod touch Product Page (Apple)