CVE-2011-1418: Infoleak
First published: Fri Mar 11 2011(Updated: )
The stateless address autoconfiguration (aka SLAAC) functionality in the IPv6 networking implementation in Apple iOS before 4.3 and Apple TV before 4.2 places the MAC address into the IPv6 address, which makes it easier for remote IPv6 servers to track users by logging source IPv6 addresses.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| iStyle @cosme iPhone OS | =3.0 | |
| iStyle @cosme iPhone OS | =3.2 | |
| iStyle @cosme iPhone OS | =3.1.3 | |
| iStyle @cosme iPhone OS | =1.0.2 | |
| iStyle @cosme iPhone OS | =4.0.2 | |
| iStyle @cosme iPhone OS | =2.2 | |
| iStyle @cosme iPhone OS | =1.1.1 | |
| iStyle @cosme iPhone OS | =4.1 | |
| iStyle @cosme iPhone OS | =2.0.0 | |
| iStyle @cosme iPhone OS | =3.1.2 | |
| iStyle @cosme iPhone OS | =3.0.1 | |
| iStyle @cosme iPhone OS | =1.1.2 | |
| iStyle @cosme iPhone OS | =3.1 | |
| iStyle @cosme iPhone OS | =1.1.3 | |
| iStyle @cosme iPhone OS | =1.1.0 | |
| iStyle @cosme iPhone OS | =1.0.1 | |
| iStyle @cosme iPhone OS | =2.1 | |
| iStyle @cosme iPhone OS | =1.1.5 | |
| iStyle @cosme iPhone OS | =4.0.1 | |
| iStyle @cosme iPhone OS | =2.1.1 | |
| iStyle @cosme iPhone OS | =1.1.4 | |
| iStyle @cosme iPhone OS | =1.0.0 | |
| iStyle @cosme iPhone OS | =2.0.2 | |
| iStyle @cosme iPhone OS | =2.0 | |
| iStyle @cosme iPhone OS | =2.0.1 | |
| iStyle @cosme iPhone OS | =4.0 | |
| iStyle @cosme iPhone OS | <=4.2 | |
| iStyle @cosme iPhone OS | =2.2.1 | |
| iStyle @cosme iPhone OS | =3.2.1 | |
| iStyle @cosme iPhone OS | =3.2.2 | |
| Apple TV | =4.0 | |
| tvOS | =1.0.0 | |
| tvOS | =1.1.0 | |
| tvOS | =2.0.0 | |
| tvOS | =2.0.1 | |
| tvOS | =2.0.2 | |
| tvOS | =2.1.0 | |
| tvOS | <=3.0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2011-1418?
CVE-2011-1418 is considered a moderate severity vulnerability due to its potential to expose users' MAC addresses in IPv6 addresses, making them easier to track.
How do I fix CVE-2011-1418?
To fix CVE-2011-1418, users should update their Apple devices to iOS version 4.3 or later, or Apple TV version 4.2 or later.
What systems are affected by CVE-2011-1418?
CVE-2011-1418 affects all Apple devices running iOS versions prior to 4.3 and Apple TV versions before 4.2.
What types of attacks can exploit CVE-2011-1418?
CVE-2011-1418 can potentially be exploited by attackers who monitor network traffic to track users based on their IPv6 addresses.
Is there a workaround for CVE-2011-1418?
There are no effective workarounds for CVE-2011-1418 other than updating the affected systems to a patched version.
- agent/references
- agent/type
- agent/author
- agent/severity
- agent/weakness
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/apple
- canonical/istyle @cosme iphone os
- version/istyle @cosme iphone os/3.0
- version/istyle @cosme iphone os/3.2
- version/istyle @cosme iphone os/3.1.3
- version/istyle @cosme iphone os/1.0.2
- version/istyle @cosme iphone os/4.0.2
- version/istyle @cosme iphone os/2.2
- version/istyle @cosme iphone os/1.1.1
- version/istyle @cosme iphone os/4.1
- version/istyle @cosme iphone os/2.0.0
- version/istyle @cosme iphone os/3.1.2
- version/istyle @cosme iphone os/3.0.1
- version/istyle @cosme iphone os/1.1.2
- version/istyle @cosme iphone os/3.1
- version/istyle @cosme iphone os/1.1.3
- version/istyle @cosme iphone os/1.1.0
- version/istyle @cosme iphone os/1.0.1
- version/istyle @cosme iphone os/2.1
- version/istyle @cosme iphone os/1.1.5
- version/istyle @cosme iphone os/4.0.1
- version/istyle @cosme iphone os/2.1.1
- version/istyle @cosme iphone os/1.1.4
- version/istyle @cosme iphone os/1.0.0
- version/istyle @cosme iphone os/2.0.2
- version/istyle @cosme iphone os/2.0
- version/istyle @cosme iphone os/2.0.1
- version/istyle @cosme iphone os/4.0
- version/istyle @cosme iphone os/4.2
- version/istyle @cosme iphone os/2.2.1
- version/istyle @cosme iphone os/3.2.1
- version/istyle @cosme iphone os/3.2.2
- canonical/apple tv
- version/apple tv/4.0
- canonical/tvos
- version/tvos/1.0.0
- version/tvos/1.1.0
- version/tvos/2.0.0
- version/tvos/2.0.1
- version/tvos/2.0.2
- version/tvos/2.1.0
- version/tvos/3.0.2