CVE-2009-1679

 

Published at: - 19-06-2009 06:30

Last modified: - 02-09-2022 03:42

Total changes: - 3

Description

The Profiles component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1, when installing a configuration profile, can replace the password policy from Exchange ActiveSync with a weaker password policy, which allows physically proximate attackers to bypass the intended policy.

Common Vulnerability Scoring System (CVSS)

AV:L/AC:L/Au:N/C:N/I:P/A:N

 

Verification logic

 

Reference

• APPLE-SA-2009-06-17-1-Vendor Advisory
• http://support.apple.com/kb/HT3639
• ADV-2009-1621-Vendor Advisory
• 35436-
• 35414-
• 55239-
• ipod-iphone-profile-security-bypass(51212)-

 

Keywords

NVD

 

CVE-2009-1679

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures