CVE-2008-1589
Safari on iPhone and iPod touch < 2.0 - Certificate Validation Bypass via Menu Button Press
Title source: llmDescription
Safari on Apple iPhone before 2.0 and iPod touch before 2.0 misinterprets a menu button press as user confirmation for visiting a web site with a (1) self-signed or (2) invalid certificate, which makes it easier for remote attackers to spoof web sites.
References (7)
Core 7
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/43734
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/30186
Third Party Advisory third-party-advisory
x_refsource_jvn
http://jvn.jp/en/jp/JVN88676089/index.html
Mailing List vendor-advisory
x_refsource_apple
http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2008/2094/references
Third Party Advisory third-party-advisory
x_refsource_jvndb
http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000039.html
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/31074
Scores
EPSS
0.0121
EPSS Percentile
65.0%
Details
CWE
CWE-20
Status
published
Products (1)
apple/safari
Published
Jul 14, 2008
Tracked Since
Feb 18, 2026