CVEvulnerability
CVE-2007-3754
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-09-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-287
Description
Mail in Apple iPhone 1.1.1, when using SSL, does not warn the user when the mail server changes or is not trusted, which might allow remote attackers to steal credentials and read email via a man-in-the-middle (MITM) attack.
Affected configurations
• apple iphone 1.0
• apple iphone os 1.0.1
• apple iphone os 1.0.2
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://docs.info.apple.com/article.html?artnum=306586 docs.info.apple.com
- http://lists.apple.com/archives/security-announce/2007/Sep/msg00001.html Patch
- http://osvdb.org/38537 osvdb.org
- http://secunia.com/advisories/26983 secunia.com
- http://securitytracker.com/id?1018752 securitytracker.com
- http://www.securityfocus.com/bid/25856 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/3287 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36845 exchange.xforce.ibmcloud.com
- http://docs.info.apple.com/article.html?artnum=306586 docs.info.apple.com
- http://lists.apple.com/archives/security-announce/2007/Sep/msg00001.html Patch
- http://osvdb.org/38537 osvdb.org
- http://secunia.com/advisories/26983 secunia.com
- http://securitytracker.com/id?1018752 securitytracker.com
- http://www.securityfocus.com/bid/25856 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/3287 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36845 exchange.xforce.ibmcloud.com