Lucene search

K
cve[email protected]CVE-2008-4229
HistoryNov 25, 2008 - 11:30 p.m.

CVE-2008-4229

2008-11-2523:30:00
CWE-362
web.nvd.nist.gov
16
cve-2008-4229
race condition
passcode lock
apple iphone
ipod touch
security vulnerability

3.7 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:N/C:P/I:P/A:P

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

26.9%

Race condition in the Passcode Lock feature in Apple iPhone OS 2.0 through 2.1 and iPhone OS for iPod touch 2.0 through 2.1 allows physically proximate attackers to remove the lock and launch arbitrary applications by restoring the device from a backup.

Affected configurations

NVD
Node
appleipod_touch
OR
appleiphone_os
AND
appleiphone_osMatch1.0
OR
appleiphone_osMatch1.0.1
OR
appleiphone_osMatch1.0.2
OR
appleiphone_osMatch1.1
OR
appleiphone_osMatch1.1.1
OR
appleiphone_osMatch1.1.2
OR
appleiphone_osMatch1.1.3
OR
appleiphone_osMatch1.1.4
OR
appleiphone_osMatch1.1.5
OR
appleiphone_osMatch2.0
OR
appleiphone_osMatch2.0.1
OR
appleiphone_osMatch2.0.2
OR
appleiphone_osMatch2.1

3.7 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:N/C:P/I:P/A:P

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

26.9%

Related for CVE-2008-4229