CVE-2008-3612

Published: Sep 11, 2008Modified: Apr 23, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

The Networking subsystem in Apple iPod touch 2.0 through 2.0.2, and iPhone 2.0 through 2.0.2, uses predictable TCP initial sequence numbers, which allows remote attackers to spoof or hijack a TCP connection.

Affected (1)

Products: Apple: Iphone Os

Apple

1 product

Iphone Os

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Apple Iphone Os	From 2.0.0 to 2.0.2

Related CWEs

CWE-330

Use of Insufficiently Random Values

The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.

References (20)

http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html

Source: cve@mitre.org

Mailing ListVendor Advisory

http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html

Source: cve@mitre.org

Mailing ListVendor Advisory

http://secunia.com/advisories/31823

Source: cve@mitre.org

Broken LinkVendor Advisory

http://secunia.com/advisories/31900

Source: cve@mitre.org

Broken LinkVendor Advisory

http://support.apple.com/kb/HT3026

Source: cve@mitre.org

Vendor Advisory

http://support.apple.com/kb/HT3129

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/31092

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1020848

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.vupen.com/english/advisories/2008/2525

Source: cve@mitre.org

Broken LinkVendor Advisory

http://www.vupen.com/english/advisories/2008/2558

Source: cve@mitre.org

Broken LinkVendor Advisory

http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html