OSVDB ID: 48044 Title: Apple iPod Touch Networking Subsystem TCP Sequence Prediction |
Info |
|
|
Dates |
||||
|
|
Description |
The iPod Touch Networking Subsystem contains a flaw that may allow a malicious user to spoof or hijack sessions. The issue is related to predictable initial TCP sequence numbers. It is possible that the flaw may lead to information disclosure resulting in a loss of confidentiality and integrity. |
Classification |
Location:
Remote / Network Access
Impact: Loss of Integrity Solution: Patch / RCS Exploit: Exploit Unknown Disclosure: Vendor Verified |
Solution |
Upgrade to version 2.1 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
References |
|
Credit |
|