CVE
- Id
- 40708
- CVE No.
- CVE-2009-3273
- Status
- Candidate
- Description
- iPhone Mail in Apple iPhone OS, and iPhone OS for iPod touch, does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL e-mail servers via a crafted certificate.
- Phase
- Assigned (20090921)
- Votes
- None (candidate not yet proposed)
- Comments