CVE

Id
40708  
CVE No.
CVE-2009-3273  
Status
Candidate  
Description
iPhone Mail in Apple iPhone OS, and iPhone OS for iPod touch, does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL e-mail servers via a crafted certificate.  
Phase
Assigned (20090921)  
Votes
None (candidate not yet proposed)  
Comments