[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250770

 
 

909

 
 

196157

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2010-1810Date: (C)2010-09-09   (M)2023-12-22


FaceTime in Apple iOS before 4.1 on the iPhone and iPod touch does not properly handle invalid X.509 certificates, which allows man-in-the-middle attackers to redirect calls via a crafted certificate.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 3.5
Exploit Score: 6.8
Impact Score: 2.9
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: SINGLE
Confidentiality: NONE
Integrity: PARTIAL
Availability: NONE
  
Reference:
APPLE-SA-2010-09-08-1
appleios-facetime-sec-bypass(61695)
http://support.apple.com/kb/HT4334

CPE    27
cpe:/o:apple:iphone_os:4.0.1
cpe:/o:apple:iphone_os:1.0.0
cpe:/o:apple:iphone_os:1.0.2
cpe:/o:apple:iphone_os:1.1.1
...

© SecPod Technologies