Apple iOS SMS Spoofing Vulnerability
BID:55087
Info
Apple iOS SMS Spoofing Vulnerability
| Bugtraq ID: | 55087 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 17 2012 12:00AM |
| Updated: | Aug 17 2012 12:00AM |
| Credit: | Pod2g |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Apple iOS SMS Spoofing Vulnerability
Apple iOS is prone to an SMS-spoofing vulnerability.
An attacker may exploit this vulnerability to send spoofed SMS contents to a victim that seem to originate from a trusted user. This allows a remote attacker to carry out phishing attacks. Other attacks may be possible.
This issue is fixed in iOS 6.
Apple iOS is prone to an SMS-spoofing vulnerability.
An attacker may exploit this vulnerability to send spoofed SMS contents to a victim that seem to originate from a trusted user. This allows a remote attacker to carry out phishing attacks. Other attacks may be possible.
This issue is fixed in iOS 6.
Exploit / POC
Apple iOS SMS Spoofing Vulnerability
To exploit this issue, an attacker must entice an unsuspecting user to reply a crafted SMS.
To exploit this issue, an attacker must entice an unsuspecting user to reply a crafted SMS.
Solution / Fix
Apple iOS SMS Spoofing Vulnerability
Solution:
Vendor updates are available. Please see the references for more information.
Solution:
Vendor updates are available. Please see the references for more information.
References
Apple iOS SMS Spoofing Vulnerability
References:
References:
- Apple iOS Homepage (Apple)
- iPad Homepage (Apple)
- iPhone Homepage (Apple)
- iPod touch Product Page (Apple)