low2.6
CVE-2011-4872
Multiple HTC Android devices including Desire HD FRG83D and GRI40, Glacier FRG83, Droid Incredible FRF91, Thunderbolt 4G FRG83D, Sensation Z710e GRI40, Sensati…
Impact
Multiple HTC Android devices including Desire HD FRG83D and GRI40, Glacier FRG83, Droid Incredible FRF91, Thunderbolt 4G FRG83D, Sensation Z710e GRI40, Sensation 4G GRI40, Desire S GRI40, EVO 3D GRI40, and EVO 4G GRI40 allow remote attackers to obtain 802.1X Wi-Fi credentials and SSID via a crafted application that uses the android.permission.ACCESS_WIFI_STATE permission to call the toString method on the WifiConfiguration class.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Htc | Desire Hd | Versions frg83d, gri40 |
| Htc | Desire S | Version gri40 |
| Htc | Droid Incredible | Version frf91 |
| Htc | Evo 3d | Version gri40 |
| Htc | Evo 4g | Version gri40 |
| Htc | Glacier | Version frg83 |
| Htc | Sensation 4g | Version gri40 |
| Htc | Sensation Z710e | Version gri40 |
| Htc | Thunderbolt 4g | Version frg83d |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2012-02/0002.html
- http://blog.mywarwithentropy.com/2012/02/8021x-password-exploit-on-many-htc.html
- http://secunia.com/advisories/47837
- http://www.kb.cert.org/vuls/id/763355
- http://www.securityfocus.com/bid/51790
- http://archives.neohapsis.com/archives/bugtraq/2012-02/0002.html
- http://blog.mywarwithentropy.com/2012/02/8021x-password-exploit-on-many-htc.html
- http://secunia.com/advisories/47837
- http://www.kb.cert.org/vuls/id/763355
- http://www.securityfocus.com/bid/51790