CVE-2007-3754

Mail in Apple iPhone 1.1.1, when using SSL, does not warn the user when the mail server changes or is not trusted, which might allow remote attackers to steal credentials and read email via a man-in-the-middle (MITM) attack.

Link	Resource
http://lists.apple.com/archives/security-announce/2007/Sep/msg00001.html	Patch
http://docs.info.apple.com/article.html?artnum=306586
http://www.securityfocus.com/bid/25856
http://securitytracker.com/id?1018752
http://secunia.com/advisories/26983
http://www.vupen.com/english/advisories/2007/3287
http://osvdb.org/38537
https://exchange.xforce.ibmcloud.com/vulnerabilities/36845

Configuration 1

cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:* cpe:2.3:h:apple:iphone:1.0:*:*:*:*:*:*:* cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*

---

Published : 2007-09-27 09:17

Updated : 2022-08-09 01:46

---

NVD link : CVE-2007-3754

Mitre link : CVE-2007-3754

No products.

CWE-287