First published: Fri Oct 14 2011(Updated: )
The Settings component in Apple iOS before 5 stores a cleartext parental-restrictions passcode in an unspecified file, which might allow physically proximate attackers to obtain sensitive information by reading this file.
Credit: product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple iPhone OS | =4.0 | |
Apple iPhone OS | =4.3.2 | |
Apple iPhone OS | =4.0.2 | |
Apple iPhone OS | =4.0.1 | |
Apple iPhone OS | =3.2 | |
Apple iPhone OS | =4.2.8 | |
Apple iPhone OS | =4.1 | |
Apple iPhone OS | =3.1.2 | |
Apple iPhone OS | =4.3.5 | |
Apple iPhone OS | =3.1.3 | |
Apple iPhone OS | =4.3.1 | |
Apple iPhone OS | =4.2.5 | |
Apple iPhone OS | =3.2.1 | |
Apple iPhone OS | =3.1 | |
Apple iPhone OS | =4.3.5 | |
Apple iPhone OS | =3.1 | |
Apple iPhone OS | =3.2 | |
Apple iPhone OS | =4.3.5 | |
Apple iPhone OS | =4.2.1 | |
Apple iPhone OS | =3.0 | |
Apple iPhone OS | =4.0.1 | |
Apple iPhone OS | =4.3.3 | |
Apple iPhone OS | =4.0.1 | |
Apple iPhone OS | =4.0 | |
Apple iPhone OS | =3.1 | |
Apple iPhone OS | =4.0 | |
Apple iPhone OS | =4.3.0 | |
Apple iPhone OS | =3.2.1 | |
Apple iPhone OS | =3.2.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2011-3429 is considered a high-severity vulnerability due to its potential exposure of sensitive information to physically proximate attackers.
To mitigate CVE-2011-3429, it is recommended to update your Apple iOS device to version 5 or later, which addresses this vulnerability.
CVE-2011-3429 affects various Apple devices running iOS versions 3.x and 4.x, including iPhones and iPods.
The vulnerability allows attackers to potentially access the cleartext parental-restrictions passcode stored within the device's settings.
No, CVE-2011-3429 requires physical access to the device, making remote exploitation impossible.