CVE-2009-0143
published 2009-03-14CVE-2009-0143: Apple iTunes before 8.1 does not properly inform the user about the origin of an authentication request, which makes it easier for remote podcast servers to…
PriorityP424medium4.3CVSS 2.0
AVNACMAuNCPINAN
EPSS
1.87%
77.0th percentile
Apple iTunes before 8.1 does not properly inform the user about the origin of an authentication request, which makes it easier for remote podcast servers to trick a user into providing a username and password when subscribing to a crafted podcast.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | itunes | < 8.1 | 8.1 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://lists.apple.com/archives/security-announce//2009/Mar/msg00001.htmlhttp://osvdb.org/52579http://secunia.com/advisories/34254http://securitytracker.com/id?1021843http://support.apple.com/kb/HT3487http://www.securityfocus.com/bid/34094http://www.vupen.com/english/advisories/2009/0702https://exchange.xforce.ibmcloud.com/vulnerabilities/49201https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5336http://lists.apple.com/archives/security-announce//2009/Mar/msg00001.htmlhttp://osvdb.org/52579http://secunia.com/advisories/34254http://securitytracker.com/id?1021843http://support.apple.com/kb/HT3487http://www.securityfocus.com/bid/34094http://www.vupen.com/english/advisories/2009/0702https://exchange.xforce.ibmcloud.com/vulnerabilities/49201https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5336
2009-03-14
Published