CVE-2010-3831

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 4.2

Description The issue allows man-in-the-middle attackers to read MobileMe account passwords by spoofing a MobileMe Gallery server during a "Send to MobileMe" action, due to the support for HTTP Basic Authentication over an unencrypted connection.

Recommendations For versions prior to 4.2, update to a version that contains a fix for this issue, as the current version enables support for HTTP Basic Authentication over an unencrypted connection, making it vulnerable to man-in-the-middle attacks.