CVE-2008-4229

Race condition in the Passcode Lock feature in Apple iPhone OS 2.0 through 2.1 and iPhone OS for iPod touch 2.0 through 2.1 allows physically proximate attackers to remove the lock and launch arbitrary applications by restoring the device from a backup.

Score

CVSS 2.0 3.7 Low

Status

Modified - cve@mitre.org

Published

2008-11-25

Last modified

2024-08-07

Weaknesses

CWE-362

Affected products

• Iphone Os (Apple)

References

• http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html
• http://osvdb.org/50026
• http://secunia.com/advisories/32756
• http://support.apple.com/kb/HT3318
• http://www.securityfocus.com/bid/32394
• http://www.securitytracker.com/id?1021271
• http://www.vupen.com/english/advisories/2008/3232