NVD

Id
48268  
Name
CVE-2009-0958  
Description
Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 stores an exception for a hostname when the user accepts an untrusted Exchange server certificate, which causes it to be accepted without prompting in future usage and allows remote Exchange servers to obtain sensitive information such as credentials.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2009-06-19  
Modified Date
2012-03-30  
Seq
2009-0958  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
242741 48268 CVE-2009-0958 APPLE-SA-2009-06-17-1  View
242742 48268 CVE-2009-0958 http://support.apple.com/kb/HT3639  View
242743 48268 CVE-2009-0958 35414  View
242744 48268 CVE-2009-0958 35447  View
242745 48268 CVE-2009-0958 ADV-2009-1621  View
242746 48268 CVE-2009-0958 iphone-ipod-certificate-info-disclosure(51208)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40841 JVNDB-2009-001847 Apple iPhone OS における重要な情報を取得される脆弱性 Apple iPhone OS には、信頼されていない Exchange サーバの証明書を受け取った場合にホスト名に対して例外が保存されるため、証明書のような重要な情報が漏えいする脆弱性が存在します。 CVE-2009-0958 38389 CVE-2009-0958 48268 7.1 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001847.html 2009-06-19 2009-08-06 View