First published: Fri Apr 27 2012(Updated: )
The NTT DOCOMO sp mode mail application 5400 and earlier for Android does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Credit: vultures@jpcert.or.jp
Affected Software | Affected Version | How to fix |
---|---|---|
Nttdocomo Spmode Mail Android | <=5400 | |
Nttdocomo Spmode Mail Android | =2546 | |
Nttdocomo Spmode Mail Android | =2631 | |
Nttdocomo Spmode Mail Android | =3000 | |
Nttdocomo Spmode Mail Android | =3100 | |
Nttdocomo Spmode Mail Android | =3200 | |
Nttdocomo Spmode Mail Android | =3300 | |
Nttdocomo Spmode Mail Android | =3400 | |
Nttdocomo Spmode Mail Android | =4000 | |
Nttdocomo Spmode Mail Android | =4200 | |
Nttdocomo Spmode Mail Android | =4300 | |
Nttdocomo Spmode Mail Android | =4400 | |
Nttdocomo Spmode Mail Android | =4500 | |
Nttdocomo Spmode Mail Android | =4600 | |
Nttdocomo Spmode Mail Android | =4700 | |
Nttdocomo Spmode Mail Android | =4800 | |
Nttdocomo Spmode Mail Android | =4900 | |
Nttdocomo Spmode Mail Android | =5000 | |
Nttdocomo Spmode Mail Android | =5100 | |
Nttdocomo Spmode Mail Android | =5200 | |
Nttdocomo Spmode Mail Android | =5300 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.