NetSight
IP …
medium4.3

CVE-2010-3831

Photos in Apple iOS before 4.2 enables support for HTTP Basic Authentication over an unencrypted connection, which allows man-in-the-middle attackers to read M…

Impact

Photos in Apple iOS before 4.2 enables support for HTTP Basic Authentication over an unencrypted connection, which allows man-in-the-middle attackers to read MobileMe account passwords by spoofing a MobileMe Gallery server during a "Send to MobileMe" action.

Affected products

VendorProductAffected versions
AppleIphone Os
through 4.1
Versions 1.0.0, 1.0.1, 1.0.2, 1.1.0, 1.1.1

Weakness classification

CWE-200

References