Apple iPhone/iPod touch FaceTime Call Redirection Security Vulnerability
BID:43082
Info
Apple iPhone/iPod touch FaceTime Call Redirection Security Vulnerability
| Bugtraq ID: | 43082 |
| Class: | Design Error |
| CVE: |
CVE-2010-1810 |
| Remote: | No |
| Local: | Yes |
| Published: | Sep 08 2010 12:00AM |
| Updated: | Sep 08 2010 12:00AM |
| Credit: | Aaron Sigel of vtty.com |
| Vulnerable: |
Apple iPod Touch 3.1.3 Apple iPod Touch 3.1.2 Apple iPod Touch 3.1.1 Apple iPod Touch 3.0 Apple iPhone 4.0.1 Apple iPhone 3.2.1 Apple iPhone 3.1.3 Apple iPhone 3.1.2 Apple iPhone 3.0.1 Apple iPhone 2.2.1 Apple iPhone 2.0.2 Apple iPhone 2.0.1 Apple iPhone 4.0.1 - Iphone Apple iPhone 4.0 - Ipodtouch Apple iPhone 4.0 - Iphone Apple iPhone 4.0 Apple iPhone 3.2.1 - Ipad Apple iPhone 3.2 - Ipodtouch Apple iPhone 3.2 - Iphone Apple iPhone 3.2 Apple iPhone 3.1.3 - Ipodtouch Apple iPhone 3.1.3 - Iphone Apple iPhone 3.1.2 - Ipodtouch Apple iPhone 3.1.2 - Iphone Apple iPhone 3.1 - Ipodtouch Apple iPhone 3.1 - Iphone Apple iPhone 3.1 Apple iPhone 3.0.1 - Ipodtouch Apple iPhone 3.0.1 - Iphone Apple iPhone 3.0 - Ipodtouch Apple iPhone 3.0 - Iphone Apple iPhone 3.0 Apple iPhone 2.2.1 - Ipodtouch Apple iPhone 2.2.1 - Iphone Apple iPhone 2.2 - Ipodtouch Apple iPhone 2.2 - Iphone Apple iPhone 2.2 Apple iPhone 2.1 - Ipodtouch Apple iPhone 2.1 - Iphone Apple iPhone 2.1 Apple iPhone 2.0 Apple iOS 4.0.2 Apple iOS 4.0.1 Apple iOS 3.2.2 Apple iOS 3.2.1 Apple iOS 4 Apple iOS 3.2 |
| Not Vulnerable: |
Apple iOS 4.1 |
Discussion
Apple iPhone/iPod touch FaceTime Call Redirection Security Vulnerability
Apple iOS for iPhone is prone to a security vulnerability that may allow attackers to redirect FaceTime calls.
Successful exploits may allow privileged networked users to redirect FaceTime calls.
NOTE: This issue was previously discussed in BID 43070 (Apple iPhone/iPod touch Prior to iOS 4.1 Multiple Vulnerabilities) but has been given its own record to better document it.
Apple iOS for iPhone is prone to a security vulnerability that may allow attackers to redirect FaceTime calls.
Successful exploits may allow privileged networked users to redirect FaceTime calls.
NOTE: This issue was previously discussed in BID 43070 (Apple iPhone/iPod touch Prior to iOS 4.1 Multiple Vulnerabilities) but has been given its own record to better document it.
Exploit / POC
Apple iPhone/iPod touch FaceTime Call Redirection Security Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Apple iPhone/iPod touch FaceTime Call Redirection Security Vulnerability
Solution:
The vendor has released an advisory and fixes. Please see the references for details.
Solution:
The vendor has released an advisory and fixes. Please see the references for details.
References
Apple iPhone/iPod touch FaceTime Call Redirection Security Vulnerability
References:
References:
- iOS Homepage (Apple)
- iPhone Product Page (Apple)
- iPod touch Product Page (Apple)