CVEvulnerability

CVE-2008-3612

9.8 CRITICAL Published 2008-09-11 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-09-11
Last modified
2026-06-16
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-330

Description

The Networking subsystem in Apple iPod touch 2.0 through 2.0.2, and iPhone 2.0 through 2.0.2, uses predictable TCP initial sequence numbers, which allows remote attackers to spoof or hijack a TCP connection.

Affected configurations

• apple iphone os (>= 2.0.0 <= 2.0.2)

Related

Weakness · CWE (1)

  • CWE-330 Use of Insufficiently Random Values weakness

Referenced by CWE · observed example (1)

  • CWE-330 Use of Insufficiently Random Values weakness

References