CVEvulnerability
CVE-2008-4229
3.7 LOW
Official page ↗
- Status
- Modified
- Published
- 2008-11-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.7 LOW — AV:L/AC:H/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-362
Description
Race condition in the Passcode Lock feature in Apple iPhone OS 2.0 through 2.1 and iPhone OS for iPod touch 2.0 through 2.1 allows physically proximate attackers to remove the lock and launch arbitrary applications by restoring the device from a backup.
Affected configurations
• apple iphone os 1.0
• apple iphone os 1.0.1
• apple iphone os 1.0.2
• apple iphone os 1.1
• apple iphone os 1.1.1
• apple iphone os 1.1.2
• apple iphone os 1.1.3
• apple iphone os 1.1.4
• apple iphone os 1.1.5
• apple iphone os 2.0
• apple iphone os 2.0.1
• apple iphone os 2.0.2
• apple iphone os 2.1
Related
Weakness · CWE (1)
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness
References
- http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html Vendor Advisory
- http://osvdb.org/50026 osvdb.org
- http://secunia.com/advisories/32756 secunia.com
- http://support.apple.com/kb/HT3318 Vendor Advisory
- http://www.securityfocus.com/bid/32394 www.securityfocus.com
- http://www.securitytracker.com/id?1021271 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/3232 www.vupen.com
- http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html Vendor Advisory
- http://osvdb.org/50026 osvdb.org
- http://secunia.com/advisories/32756 secunia.com
- http://support.apple.com/kb/HT3318 Vendor Advisory
- http://www.securityfocus.com/bid/32394 www.securityfocus.com
- http://www.securitytracker.com/id?1021271 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/3232 www.vupen.com