CVE-2008-1589

 

Published at: - 14-07-2008 08:41

Last modified: - 09-08-2022 03:46

Total changes: - 2

Description

Safari on Apple iPhone before 2.0 and iPod touch before 2.0 misinterprets a menu button press as user confirmation for visiting a web site with a (1) self-signed or (2) invalid certificate, which makes it easier for remote attackers to spoof web sites.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:M/Au:N/C:N/I:P/A:N

 

Verification logic

 

Reference

• APPLE-SA-2008-07-11-
• 30186-
• 31074-
• JVN#88676089-
• JVNDB-2008-000039-
• ADV-2008-2094-
• ipod-iphone-certificate-info-disclosure(43734)-

 

Keywords

NVD

 

CVE-2008-1589

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures