Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2008-3434
HistoryAug 01, 2008 - 2:41 p.m.

CVE-2008-3434

2008-08-0114:41:00
CWE-94
[email protected]
web.nvd.nist.gov
183
apple
itunes
update
verification
vulnerability
cve-2008-3434
nvd
security

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

60.8%

JSON

Apple iTunes before 10.5.1 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.

Affected configurations

NVD
Node
appleitunesRange≀6.0.5
OR
appleitunesMatch1.0
OR
appleitunesMatch1.1
OR
appleitunesMatch1.1.1
OR
appleitunesMatch1.1.2
OR
appleitunesMatch2.0
OR
appleitunesMatch2.0.1
OR
appleitunesMatch2.0.2
OR
appleitunesMatch2.0.3
OR
appleitunesMatch2.0.4
OR
appleitunesMatch3.0
OR
appleitunesMatch3.0.1
OR
appleitunesMatch4.0
OR
appleitunesMatch4.0.1
OR
appleitunesMatch4.1
OR
appleitunesMatch4.2
OR
appleitunesMatch4.5
OR
appleitunesMatch4.6
OR
appleitunesMatch4.7
OR
appleitunesMatch4.7.1
OR
appleitunesMatch4.8
OR
appleitunesMatch4.9
OR
appleitunesMatch5.0
OR
appleitunesMatch5.0.1
OR
appleitunesMatch6.0
OR
appleitunesMatch6.0.1
OR
appleitunesMatch6.0.2
OR
appleitunesMatch6.0.3
OR
appleitunesMatch6.0.4
OR
appleitunesMatch6.0.4.2

Related

securityvulns 2
openvas 4
prion 1
nvd 1
nessus 3
seebug 1
cvelist 1
securityvulns
securityvulns
Apple iTunes insecure updates
2011-11-16 00:00:00
APPLE-SA-2011-11-14-1 iTunes 10.5.1
2011-11-16 00:00:00
openvas
openvas
Apple iTunes Remote Code Execution Vulnerability (Windows)
2011-11-28 00:00:00
Apple iTunes Remote Code Execution Vulnerability - Windows
2011-11-28 00:00:00
Apple iTunes Remote Code Execution Vulnerability - Mac OS X
2011-11-28 00:00:00
prion
prion
Design/Logic Flaw
2008-08-01 14:41:00
nvd
nvd
CVE-2008-3434
2008-08-01 14:41:00
nessus
nessus
Apple iTunes < 10.5.1 Update Authenticity Verification Weakness (uncredentialed check)
2011-11-18 00:00:00
Apple iTunes < 10.5.1 Update Authenticity Verification Weakness (credentialed check)
2011-11-18 00:00:00
iTunes < 10.5.1 Update Authenticity Verification Weakness (Mac OS X)
2011-11-18 00:00:00
seebug
seebug
Apple iTunes 10.xθ½―δ»Άζ›΄ζ–°δΌͺι€ ζΌζ΄ž
2011-11-16 00:00:00
cvelist
cvelist
CVE-2008-3434
2008-08-01 14:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

60.8%

JSON
Related for CVE-2008-3434
securityvulns2openvas4prion1nvd1nessus3seebug1cvelist1