PT-2008-4988 · Apple · Iphone+1
CVE-2008-3612
·
Publicado
2008-09-10
·
Atualizado
2024-02-14
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Apple iPod touch versions 2.0 through 2.0.2
Apple iPhone versions 2.0 through 2.0.2
Description
The issue is related to the Networking subsystem, which uses predictable TCP initial sequence numbers. This allows remote attackers to potentially spoof or hijack a TCP connection.
Recommendations
For Apple iPod touch versions 2.0 through 2.0.2, update to a version that addresses the predictable TCP initial sequence number issue.
For Apple iPhone versions 2.0 through 2.0.2, update to a version that addresses the predictable TCP initial sequence number issue.
Correção
Use of Insufficiently Random Values
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Iphone
Ipod Touch