CVE-2009-0958: Infoleak
Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 stores an exception for a hostname when the user accepts an untrusted Exchange server certificate, which causes it to be accepted without prompting in future usage and allows remote Exchange servers to obtain sensitive information such as credentials.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0958?
CVE-2009-0958 is considered a medium severity vulnerability due to its potential to allow unauthorized access to sensitive information from remote Exchange servers.
How do I fix CVE-2009-0958?
To mitigate CVE-2009-0958, users should update their Apple iPhone OS or iPod touch to the latest versions that address this vulnerability.
What types of devices are affected by CVE-2009-0958?
CVE-2009-0958 affects Apple iPhone OS versions 1.0 through 2.2.1 and iPod touch versions 1.1 through 2.2.1.
What is the impact of CVE-2009-0958?
The impact of CVE-2009-0958 is that it allows remote Exchange servers to access sensitive user information without prompting for certificate verification.
Who is vulnerable to CVE-2009-0958?
Users of Apple iPhone OS and iPod touch running affected versions are vulnerable to CVE-2009-0958.