← Back

CVE-2009-3273

nvd nist
Published: Sep 21, 2009Modified: Apr 23, 2026

JSON object

Loading...
7.5
Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 10.0 / Impact: 6.4
Source: NVD

Description

iPhone Mail in Apple iPhone OS, and iPhone OS for iPod touch, does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL e-mail servers via a crafted certificate.

Affected (48)

Products: Apple: Iphone Os
1 product
Iphone Os
Configuration A
48 vulnerable
Vulnerable SoftwareAffected Versions
Apple
Version 1.0.0
Version 1.0.1
Version 1.0.1
Version 1.0.2
Version 1.0.2
Version 1.0
Version 1.1.0
Version 1.1.0
Version 1.1.0
Version 1.1.1
Version 1.1.1
Version 1.1.2
Version 1.1.2
Version 1.1.2
Version 1.1.3
Version 1.1.3
Version 1.1.3
Version 1.1.4
Version 1.1.4
Version 1.1.4
Version 1.1.5
Version 1.1.5
Version 1.1.5
Version 1.1
Version 2.0.0
Version 2.0.0
Version 2.0.0
Version 2.0.1
Version 2.0.1
Version 2.0.1
Version 2.0.2
Version 2.0.2
Version 2.0.2
Version 2.0
Version 2.1.1
Version 2.1
Version 2.1
Version 2.1
Version 2.2.1
Version 2.2.1
Version 2.2.1
Version 2.2
Version 2.2
Version 2.2
Version 3.0.1
Version 3.0.1
Version 3.0
Version 3.0

Related CWEs

References (6)

Timeline

No history available yet.