libinfo in Apple iOS before 5.0.1 does not properly formulate domain-name queries, which allows remote attackers to obtain sensitive information via a crafted DNS hostname.

The mobile device is running a version of iOS that is older than version 5.0.1.  Version 5.0.1 contains security-related fixes for the following vulnerabilities :

  - Apple iOS and Mac OS X CFNetwork Cross-Domain     Information Disclosure Vulnerability (CVE-2011-3246)

  - Apple iOS FreeType Multiple Memory Corruption     Vulnerabilities (CVE-2011-3439)

  - Apple iOS Code Signing Security Bypass Vulnerability     (CVE-2011-3442)

  - Apple iOS Libinfo Component Information Disclosure     Vulnerability (CVE-2011-3441)

  - Apple iPad Passcode Lock Local Security Bypass     Vulnerability (CVE-2011-3440)

The remote host is running a version of Mac OS X 10.7 that is older than version 10.7.3.  The newer version contains numerous security-related fixes for the following components :

  - Address Book
  - Apache
  - ATS
  - CFNetwork
 - CoreMedia
 - CoreText
 - CoreUI
 - curl
 - Data Security
 - dovecot
 - filecmds
 - ImageIO
 - Internet Sharing
 - Libinfo
 - libresolv
 - libsecurity
 - OpenGL
 - PHP
 - QuickTime
 - Subversion
 - Time Machine
 - WebDAV Sharing
 - Webmail
 - X11

The remote host is running a version of Mac OS X 10.7.x that is prior to 10.7.3. The newer version contains multiple security-related fixes for the following components :

  - Address Book
  - Apache
  - ATS
  - CFNetwork
  - CoreMedia
  - CoreText
  - CoreUI
  - curl
  - Data Security
  - dovecot
  - filecmds
  - ImageIO
  - Internet Sharing
  - Libinfo
  - libresolv
  - libsecurity
  - OpenGL
  - PHP
  - QuickTime
  - Subversion
  - Time Machine
  - WebDAV Sharing
  - Webmail
  - X11

According to its banner, the remote Apple iOS device is missing a security update.  Versions of Apple iOS 3.0 through 5.0 are affected by vulnerabilities within the following components :

 - CFNetwork (CVE-2011-3246)
 - CoreGraphics (CVE-2011-3439)
 - Kernel (CVE-2011-3442)
 - libinfo (CVE-2011-3441)
 - Passcode Lock (CVE-2011-3440)

ID	Name	Product	Family	Severity
60025	Apple iOS < 5.0.1 Multiple Vulnerabilities	Nessus	Mobile Devices	high
6303	Mac OS X 10.7 < 10.7.3 Multiple Vulnerabilities	Nessus Network Monitor	Generic	critical
57797	Mac OS X 10.7.x < 10.7.3 Multiple Vulnerabilities (BEAST)	Nessus	MacOS X Local Security Checks	critical
6096	Apple iOS < 5.0.1 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices	high

Detections

Analytics

CVE-2011-3441

high

Tenable Plugins

high

critical

critical

high