VulnerabilityModified
CVE-2007-3754
Mail in Apple iPhone 1.1.1, when using SSL, does not warn the user when the mail server changes or is not trusted, which might allow remote attackers to steal credentials and read email via a man-in-the-middle (MITM) attack.
MEDIUM 4.3EPSS 1.84%
Does this matter?
Lower severity and a low EPSS score (1.84%). Track it; it rarely justifies an emergency change on its own.
Description
Mail in Apple iPhone 1.1.1, when using SSL, does not warn the user when the mail server changes or is not trusted, which might allow remote attackers to steal credentials and read email via a man-in-the-middle (MITM) attack.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N
- EPSS
- 1.84% probability · 78th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-287
- Affected
- apple/iphone · apple/iphone os
- Source
- cve@mitre.org
References
- http://docs.info.apple.com/article.html?artnum=306586
- http://lists.apple.com/archives/security-announce/2007/Sep/msg00001.htmlPatch
- http://osvdb.org/38537
- http://secunia.com/advisories/26983
- http://securitytracker.com/id?1018752
- http://www.securityfocus.com/bid/25856
- http://www.vupen.com/english/advisories/2007/3287
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36845
- http://docs.info.apple.com/article.html?artnum=306586
- http://lists.apple.com/archives/security-announce/2007/Sep/msg00001.htmlPatch
- http://osvdb.org/38537
- http://secunia.com/advisories/26983
- http://securitytracker.com/id?1018752
- http://www.securityfocus.com/bid/25856
- http://www.vupen.com/english/advisories/2007/3287
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36845
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.