CVE

Id
71662  
CVE No.
CVE-2014-4366  
Status
Candidate  
Description
Mail in Apple iOS before 8 does not prevent sending a LOGIN command to a LOGINDISABLED IMAP server, which allows remote attackers to obtain sensitive cleartext information by sniffing the network.  
Phase
Assigned (20140620)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
680812 71662 CVE-2014-4366 CONFIRM:http://support.apple.com/kb/HT6441  View
680813 71662 CVE-2014-4366 APPLE:APPLE-SA-2014-09-17-1  View
680814 71662 CVE-2014-4366 URL:http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html  View
680815 71662 CVE-2014-4366 BID:69882  View
680816 71662 CVE-2014-4366 URL:http://www.securityfocus.com/bid/69882  View
680817 71662 CVE-2014-4366 BID:69914  View
680818 71662 CVE-2014-4366 URL:http://www.securityfocus.com/bid/69914  View
680819 71662 CVE-2014-4366 SECTRACK:1030866  View
680820 71662 CVE-2014-4366 URL:http://www.securitytracker.com/id/1030866  View
680821 71662 CVE-2014-4366 XF:appleios-cve20144366-info-disc(96098)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15429 JVNDB-2014-004304 Apple iOS および Mac OS X の Foundation 内の NSXMLParser における任意のファイルを読まれる脆弱性 Apple iOS および Mac OS X の Foundation 内の NSXMLParser には、任意のファイルを読まれる脆弱性が存在します。 CVE-2014-4374 71662 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004304.html  View