Detections
Analytics
Apple iOS 4.2.5 and 4.2.6 Multiple Vulnerabilities
critical Nessus Network Monitor Plugin ID 5889
Synopsis
The remote mobile device is running an outdated version of Apple iOS that is missing multiple security updates.Description
According to its banner, the remote Apple iOS device is missing a security update. Versions of Apple iOS 4.2.5 or 4.2.6 are affected by vulnerabilities within the following components :- Certificate Trust Policy
- QuickLook
- WebKit
Solution
Upgrade to iOS version 4.2.7 or later.See Also
http://www.zerodayinitiative.com/advisories/ZDI-11-109
http://lists.apple.com/archives/Security-announce/2011/Apr/msg00001.html
Plugin Details
Severity: Critical
ID: 5889
Family: Mobile Devices
Published: 4/14/2011
Updated: 3/6/2019
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 8.3
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Temporal Score: 9.1
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C
Vulnerability Information
CPE: cpe:/o:apple:iphone_os
Patch Publication Date: 4/14/2011
Vulnerability Publication Date: 4/14/2011