FKIE_CVE-2008-3434

Vulnerability from fkie_nvd - Published: 2008-08-01 14:41 - Updated: 2025-04-09 00:30
Severity ?
Summary
Apple iTunes before 10.5.1 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.
References
cve@mitre.orghttp://archives.neohapsis.com/archives/bugtraq/2008-07/0250.html
cve@mitre.orghttp://lists.apple.com/archives/Security-announce/2011/Nov/msg00003.html
cve@mitre.orghttp://support.apple.com/kb/HT5030
cve@mitre.orghttp://www.infobyte.com.ar/down/Francisco%20Amato%20-%20evilgrade%20-%20ENG.pdf
cve@mitre.orghttp://www.infobyte.com.ar/down/isr-evilgrade-1.0.0.tar.gz
cve@mitre.orghttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17136
af854a3a-2127-422b-91ae-364da2661108http://archives.neohapsis.com/archives/bugtraq/2008-07/0250.html
af854a3a-2127-422b-91ae-364da2661108http://lists.apple.com/archives/Security-announce/2011/Nov/msg00003.html
af854a3a-2127-422b-91ae-364da2661108http://support.apple.com/kb/HT5030
af854a3a-2127-422b-91ae-364da2661108http://www.infobyte.com.ar/down/Francisco%20Amato%20-%20evilgrade%20-%20ENG.pdf
af854a3a-2127-422b-91ae-364da2661108http://www.infobyte.com.ar/down/isr-evilgrade-1.0.0.tar.gz
af854a3a-2127-422b-91ae-364da2661108https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17136
Impacted products
Vendor Product Version
apple itunes *
apple itunes 1.0
apple itunes 1.1
apple itunes 1.1.1
apple itunes 1.1.2
apple itunes 2.0
apple itunes 2.0.1
apple itunes 2.0.2
apple itunes 2.0.3
apple itunes 2.0.4
apple itunes 3.0
apple itunes 3.0.1
apple itunes 4.0
apple itunes 4.0.1
apple itunes 4.1
apple itunes 4.2
apple itunes 4.5
apple itunes 4.6
apple itunes 4.7
apple itunes 4.7.1
apple itunes 4.8
apple itunes 4.9
apple itunes 5.0
apple itunes 5.0.1
apple itunes 6.0
apple itunes 6.0.1
apple itunes 6.0.2
apple itunes 6.0.3
apple itunes 6.0.4
apple itunes 6.0.4.2
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "54BA0A48-E321-436A-8398-DB64C29CDC8E",
              "versionEndIncluding": "6.0.5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "A8659A87-1197-4C3B-A076-90FE3A453205",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "4E15C097-98DE-4217-8814-95B54CE418F5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:1.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "FC4179C0-CA2C-42D7-AD72-A19668662A62",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:1.1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "A0A8AD07-07A4-4384-BE4D-8DB0F2E902A2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "4AD3FBB2-EF88-42B5-8745-0DE5A3BB340C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:2.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "EA630BC5-DF1D-4602-A3AA-3319F3C5C9B6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:2.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "F1EB1098-87E1-45DC-BD44-2B374BAA758C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:2.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "49DD3B1C-1743-434B-B67F-A3C1B350059A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:2.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "4E27E1D8-0303-4F91-B1B0-38C64A8F04F0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:3.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "F995CF65-E3DD-4C54-B3F5-417C6F75D930",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:3.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "44964DEC-DC35-4DCE-B28D-687348758163",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:4.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "A8F1A117-8508-4274-99EA-D58F54EBBA6A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:4.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "3C910CA4-5EA5-4507-BDE9-3E6C1434B666",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:4.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "4490461A-84C7-42C3-A61B-4E6EF5980B47",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:4.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "D365C93F-D06C-4FB0-8192-A4E84B6B2F3F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:4.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "C4B6A66A-AC5F-48E0-ABCE-68828207B106",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:4.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "071BFB1F-402B-4D8C-8155-671792AEDB81",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:4.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "DCBA60E9-C5B5-4B4C-9FA3-7FE0F3F6871C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:4.7.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "CFB9D7E1-B715-4A93-9CDB-99A89C7D85B1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:4.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "07040FC1-6BFE-4E8F-A089-1166404BE33B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:4.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "D6573035-D208-4C4C-98A4-A7BA26C6AB15",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:5.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "B48FDD0A-6DE5-44DD-B144-32B91DB26C7E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:5.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "B591AE1E-02DB-462A-B71F-48947525D232",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "FCD0C29E-FB9F-41DE-968F-46DD0EA55003",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:6.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "2276BED4-82F0-4F62-AA6F-7E1667F28E3A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:6.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "45D47548-1C4D-4368-99D1-929905DD6B3A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:6.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "28AE8D2D-63CA-4091-9D59-CE919EB1FD75",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:6.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "EC9E22D2-551A-4CDF-B9F0-C45A3A2B7695",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:6.0.4.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "52A433A5-3EFF-405D-8285-97EC88857968",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Apple iTunes before 10.5.1 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning."
    },
    {
      "lang": "es",
      "value": "Apple iTunes anterior a versi\u00f3n 10.5.1, no comprueba apropiadamente la autenticidad de las actualizaciones, lo que permite a los atacantes de tipo man-in-the-middle ejecutar c\u00f3digo arbitrario por medio de una actualizaci\u00f3n de tipo caballo de troya, como es demostrado por el evilgrade y el envenenamiento de la cach\u00e9  de DNS."
    }
  ],
  "id": "CVE-2008-3434",
  "lastModified": "2025-04-09T00:30:58.490",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": true,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2008-08-01T14:41:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://archives.neohapsis.com/archives/bugtraq/2008-07/0250.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.apple.com/archives/Security-announce/2011/Nov/msg00003.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://support.apple.com/kb/HT5030"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.infobyte.com.ar/down/Francisco%20Amato%20-%20evilgrade%20-%20ENG.pdf"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.infobyte.com.ar/down/isr-evilgrade-1.0.0.tar.gz"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17136"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://archives.neohapsis.com/archives/bugtraq/2008-07/0250.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.apple.com/archives/Security-announce/2011/Nov/msg00003.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://support.apple.com/kb/HT5030"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.infobyte.com.ar/down/Francisco%20Amato%20-%20evilgrade%20-%20ENG.pdf"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.infobyte.com.ar/down/isr-evilgrade-1.0.0.tar.gz"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17136"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-94"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.