Multiple Apple Products CVE-2014-1295 Security Bypass Vulnerability
BID:67025
Info
Multiple Apple Products CVE-2014-1295 Security Bypass Vulnerability
| Bugtraq ID: | 67025 |
| Class: | Design Error |
| CVE: |
CVE-2014-1295 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 22 2014 12:00AM |
| Updated: | Apr 22 2014 12:00AM |
| Credit: | Antoine Delignat-Lavaud, Karthikeyan Bhargavan and Alfredo Pironti of Prosecco at Inria Paris |
| Vulnerable: |
Apple OS X Mavericks 10.9.2 Apple Mac OS X Server 10.7.5 Apple Mac OS X 10.8.5 Apple Mac OS X 10.7.5 Apple iPhone 5 0 Apple Iphone 4S - Apple Iphone 4 Apple Ipad2 - Apple iPad 4 0 Apple iPad 3 0 Apple iOS 7.0.6 Apple iOS 7.0.3 Apple iOS 7.0.2 Apple iOS 7.0.1 Apple iOS 6.3.1 Apple iOS 6.1.6 Apple iOS 6.1.4 Apple iOS 6.1.3 Apple iOS 4.2.1 Apple iOS 4.0.2 Apple iOS 4.0.1 Apple iOS 7.1 Apple iOS 7.0.4 Apple iOS 6.1 Apple iOS 6.0.2 Apple iOS 6.0.1 Apple iOS 6 Apple iOS 5.1.1 Apple iOS 5.1 Apple iOS 5.0.1 Apple iOS 5 Apple iOS 4.3.5 Apple iOS 4.3.4 Apple iOS 4.3.3 Apple iOS 4.3.2 Apple iOS 4.3.1 Apple iOS 4.3 Apple iOS 4.2.9 Apple iOS 4.2.8 Apple iOS 4.2.7 Apple iOS 4.2.6 Apple iOS 4.2.5 Apple iOS 4.2.10 Apple iOS 4.2 Apple iOS 4.1 Apple iOS 4 Apple Apple TV 6.0.2 Apple Apple TV 5.2.1 Apple Apple TV 5.1.1 Apple Apple TV 4.4.2 Apple Apple TV 4.4 Apple Apple TV 6.1 Apple Apple TV 6.0.1 Apple Apple TV 6.0 Apple Apple TV 5.2 Apple Apple TV 5.1.0 Apple Apple TV 5.1 Apple Apple TV 5.0.2 Apple Apple TV 5.0.1 Apple Apple TV 5.0.0 Apple Apple TV 5.0 Apple Apple TV 4.4.4 Apple Apple TV 4.4.3 Apple Apple TV 4.4 Apple Apple TV 4.3.0 Apple Apple TV 4.3 Apple Apple TV 4.2.2 Apple Apple TV 4.2.1 Apple Apple TV 4.2.0 Apple Apple TV 4.2 Apple Apple TV 4.1.1 Apple Apple TV 4.1.0 Apple Apple TV 4.1 Apple Apple TV 4.0 Apple Apple TV 3.0.2 Apple Apple TV 3.0.1 Apple Apple TV 3.0.0 Apple Apple TV 2.4.0 Apple Apple TV 2.3.1 Apple Apple TV 2.3.0 Apple Apple TV 2.2.0 Apple Apple TV 2.1 |
| Not Vulnerable: |
Apple iOS 7.1.1 Apple Apple TV 6.1.1 |
Discussion
Multiple Apple Products CVE-2014-1295 Security Bypass Vulnerability
Multiple Apple products are prone to a security-bypass vulnerability.
An attacker can exploit this issue to perform man-in-the-middle attacks or impersonate server certificate, which will aid in further attacks.
Multiple Apple products are prone to a security-bypass vulnerability.
An attacker can exploit this issue to perform man-in-the-middle attacks or impersonate server certificate, which will aid in further attacks.
Exploit / POC
Multiple Apple Products CVE-2014-1295 Security Bypass Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Multiple Apple Products CVE-2014-1295 Security Bypass Vulnerability
References:
References:
- Apple iOS Homepage (Apple)