iOS 4.3.5 Update iOS



iOS 4.3.5 소프트웨어 업데이트

인증서 확인과 관련된 보안 상의 취약점을 수정합니다.

이 소프트웨어 업데이트와 호환 가능한 제품:
• iPhone 4(GSM 모델)
• iPhone 3GS
• iPad 2
• iPad
• iPod touch(4세대)
• iPod touch(3세대)

이 업데이트의 보안 콘텐츠에 대한 정보를 보려면,
다음 웹 사이트에서 확인하십시오:
<http://support.apple.com/kb/HT1222?viewlocale=ko_KR>
링크를 가도 아직 한국어 페이지 업데이트는 역시 안되어있습니다.
영문 페이지 디테일 정보입니다.


About the security content of iOS 4.3.5 Software Update for iPhone

  • 최근 수정일: 25 July, 2011
  • 문서: HT4824

Summary

This document describes the security content of iOS 4.3.5, which can be downloaded and installed using iTunes.

For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn more about Apple Product Security, see the Apple Product Security website.

For information about the Apple Product Security PGP Key, see "How to use the Apple Product Security PGP Key."

Where possible, CVE IDs are used to reference the vulnerabilities for further information.

To learn about other Security Updates, see "Apple Security Updates".

Products Affected

iPad, iPod touch (3rd generation), iPhone 4, iPod touch (4th generation), iPhone 3GS, Product Security

iOS 4.3.5 Software Update

  • Data Security

    Available for: iOS 3.0 through 4.3.4 for iPhone 3GS and iPhone 4 (GSM), iOS 3.1 through 4.3.4 for iPod touch (3rd generation) and later, iOS 3.2 through 4.3.4 for iPad

    Impact: An attacker with a privileged network position may capture or modify data in sessions protected by SSL/TLS

    Description: A certificate chain validation issue existed in the handling of X.509 certificates. An attacker with a privileged network position may capture or modify data in sessions protected by SSL/TLS. Other attacks involving X.509 certificate validation may also be possible. This issue is addressed through improved validation of X.509 certificate chains.

    CVE-ID

    CVE-2011-0228 : Gregor Kopf of Recurity Labs on behalf of BSI, and Paul Kehrer of Trustwave's SpiderLabs


덧글

댓글 입력 영역


클린블로그

통계 위젯 (블랙)

440
221
349194

플래그카운터

free counters

구글통계