CVE-2007-3754 | BDVDB-2026-26548 Detail
Description#
Mail in Apple iPhone 1.1.1, when using SSL, does not warn the user when the mail server changes or is not trusted, which might allow remote attackers to steal credentials and read email via a man-in-the-middle (MITM) attack.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://lists.apple.com/archives/security-announce/2007/Sep/msg00001.html
- http://www.securityfocus.com/bid/25856
- http://docs.info.apple.com/article.html?artnum=306586
- http://secunia.com/advisories/26983
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36845
- http://www.vupen.com/english/advisories/2007/3287
- http://securitytracker.com/id?1018752
- http://osvdb.org/38537
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.