CVE-2008-3612 The Networking subsystem in Apple iPod touch 2.0 through 2.0.2, and iPhone 2.0 through 2.0.2, uses predictable TCP initial sequence numbers, which allows remote attackers to spoof or hijack a TCP conn...
CriticalCVSS 9.8
EPSS 3.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Networking subsystem in Apple iPod touch 2.0 through 2.0.2, and iPhone 2.0 through 2.0.2, uses predictable TCP initial sequence numbers, which allows remote attackers to spoof or hijack a TCP connection.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple iphone os | >= 2.0.0, <= 2.0.2 | No fix listed |
References
- APPLE-SA-2008-09-09 mailing-list vendor-advisory
- APPLE-SA-2008-09-12 mailing-list vendor-advisory
- 31823 broken-link third-party-advisory vendor-advisory
- 31900 broken-link third-party-advisory vendor-advisory
- support.apple.com vendor-advisory
- support.apple.com vendor-advisory
- 31092 broken-link third-party-advisory vdb-entry
- 1020848 broken-link third-party-advisory vdb-entry
- ADV-2008-2525 broken-link vdb-entry vendor-advisory
- ADV-2008-2558 broken-link vdb-entry vendor-advisory