CVE-2011-1418 | BDVDB-2026-45478 Detail

Description#

The stateless address autoconfiguration (aka SLAAC) functionality in the IPv6 networking implementation in Apple iOS before 4.3 and Apple TV before 4.2 places the MAC address into the IPv6 address, which makes it easier for remote IPv6 servers to track users by logging source IPv6 addresses.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://support.apple.com/kb/HT4564
http://support.apple.com/kb/HT4565
http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html
http://lists.apple.com/archives/security-announce/2011//Mar/msg00005.html

Exploit#

No public exploit known

History#

Version 12011-03-11Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.