CVE-2011-3257: Low severity iphone os vulnerability
The Data Access component in Apple iOS before 5 does not properly handle the existence of multiple user accounts on the same mail server, which allows local users to bypass intended access restrictions in opportunistic circumstances by leveraging a different account's cookie.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-3257?
CVE-2011-3257 is classified as a vulnerability that can allow unauthorized access under certain conditions.
How do I fix CVE-2011-3257?
To mitigate CVE-2011-3257, it is recommended to update to a version of Apple iOS that is 5.0 or later.
What systems are affected by CVE-2011-3257?
CVE-2011-3257 affects iOS versions prior to 5.0 including 4.0, 4.0.1, and all versions up to 4.3.5.
What type of attack does CVE-2011-3257 enable?
CVE-2011-3257 can potentially allow local users to bypass intended access restrictions via shared cookies.
Who should be concerned about CVE-2011-3257?
Users of affected iOS devices, particularly those using multiple accounts on the same email server, should be concerned about CVE-2011-3257.