+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Keyloggers (https://hackforums.net/forumdisplay.php?fid=113)
+---- Thread: [WARNING] Apple's iOS vulnerable to MITM Attack, Install iOS 7.0.6 Patch [SSL FLAW] (/showthread.php?tid=4076384)
[WARNING] Apple's iOS vulnerable to MITM Attack, Install iOS 7.0.6 Patch [SSL FLAW] - Null Byte - Feb 22, 2014
[img]http://profileimages.guru.com/1/143/1143515/apple-logo-black-small1_768f5575-5f89-4f8e-b809-b97a52d0a858.png[/img]
Alert for: All iPhone devices without the iOS 7.0.6 patch
Vulnerabilities: CVE-2014-1266
Update: Go to Settings app > General > Software Update
Information:
Apple's latest 35.4 MB update of iOS 7.0.6 doesn't seem important at first, but it contains a critical security patch that addresses a flaw with SSL encryption.
Yes, a very critical security vulnerability that could allow hackers to intercept email and other communications that are meant to be encrypted in iPhone, iPad and Mac computer.
The vulnerability assigned CVE-2014-1266 and affects both the iOS and OS X operating systems, describes as 'Secure Transport failed to validate the authenticity of the connection. This issue was addressed by restoring missing validation steps.' in other words, anyone with a certificate signed by a "trusted CA" can perform Man-in-the-middle (MITM) attack.
Source: http://thehackernews.com/2014/02/apples-ios-vulnerable-to-man-in-middle.html
* - Wander - Feb 22, 2014
Love my mac and this is very helpful. Appreciate the guide mate!