Apple iPhone Lets Physically Local Users Make Arbitrary Calls in Emergency Mode
|
|
SecurityTracker Alert ID: 1021271
|
|
SecurityTracker URL: http://securitytracker.com/id?1021271
|
|
CVE Reference: CVE-2008-4228
, CVE-2008-4229
(Links to External Site)
|
Date: Nov 21 2008
|
Impact: User access via local system
|
Fix Available: Yes
Vendor Confirmed: Yes
|
Advisory: Apple Security Advisory
|
Version(s): 1.0 - 2.1
|
Description: A vulnerability was reported in Apple iPhone. A physically local user can make arbitrary calls when in emergency mode.
A physically local user can make an emergency call to any number [CVE-2008-4228].
When a device is restored from backup, the Passcode
Lock settings may be removed [CVE-2008-4229]. A physically local user can access the device without supplying the passcode. Nolen
Scaife reported this vulnerability.
|
Impact: A physically local user can make arbitrary calls when in emergency mode.
A physically local user can access the device without using the passcode.
|
Solution: The vendor has issued a fixed version (2.2).
The vendor's advisory is available at:
http://support.apple.com/kb/HT3318
|
Vendor URL: support.apple.com/kb/HT3318 (Links to External Site)
|
Cause: Access control error
|
|
Message History:
None.
|
Source Message Contents
|
Date: Fri, 21 Nov 2008 03:02:15 -0500
Subject: Apple iPhone
|
APPLE-SA-2008-11-20 iPhone OS 2.2 and iPhone OS for iPod touch 2.2
Passcode Lock
CVE-ID: CVE-2008-4228
Available for: iPhone OS 1.0 through 2.1,
iPhone OS for iPod touch 1.1 through 2.1
Impact: Emergency calls are not restricted to emergency numbers
Description: iPhone provides the ability to make an emergency call
when locked. Currently, an emergency call may be placed to any
number. A person with physical access to an iPhone may take advantage
of this feature to place arbitrary calls which are charged to the
iPhone owner. This update addresses the issue by restricting
emergency calls to a limited set of phone numbers.
Passcode Lock
CVE-ID: CVE-2008-4229
Available for: iPhone OS 1.0 through 2.1,
iPhone OS for iPod touch 1.1 through 2.1
Impact: Restoring a device from backup may not re-enable the
Passcode Lock
Description: The Passcode Lock feature is designed to prevent
applications from being launched unless the correct passcode is
entered. A race condition in the handling of device settings may
cause the Passcode Lock to be removed when the device is restored
from backup. This may allow a person with physical access to the
device to launch applications without the passcode. This update
addresses the issue by improving the system's ability to recognize
missing preferences. This issue does not affect systems prior to
iPhone OS 2.0 or iPhone OS for iPod touch 2.0. Credit to Nolen Scaife
for reporting this issue.
|
|
