Apple iOS < 4.2.10 / 4.3.x < 4.3.5 Data Security Certificate Verification

high Nessus Network Monitor Plugin ID 5993

Synopsis

The remote host is affected by a security bypass vulnerability.

Description

According to its banner, the remote Apple iOS device is affected by a security bypass vulnerability due to a certificate chain validation issue during the handling of X.509 certificates. Versions of Apple iOS less than version 4.2.10, or 4.3.x prior to 4.3.5 are potentially affected by this security bypass vulnerability.

Solution

Upgrade to Apple iOS 4.2.10, 4.3.5, or later.

Plugin Details

Severity: High

ID: 5993

Family: Mobile Devices

Published: 7/26/2011

Updated: 3/6/2019

Risk Information

VPR

Risk Factor: Medium

Score: 5.5

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.2

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS v3

Risk Factor: High

Base Score: 7.3

Temporal Score: 6.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C

Vulnerability Information

CPE: cpe:/o:apple:iphone_os

Patch Publication Date: 7/25/2011

Vulnerability Publication Date: 7/25/2011

Reference Information

CVE: CVE-2011-0228

BID: 48877

Detections

Analytics