5.8

CVE-2012-1244

The NTT DOCOMO sp mode mail application 5400 and earlier for Android does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Nttdocomo ≫ Spmode Mail Android Version <= 5400
Nttdocomo ≫ Spmode Mail Android Version 2546
Nttdocomo ≫ Spmode Mail Android Version 2631
Nttdocomo ≫ Spmode Mail Android Version 3000
Nttdocomo ≫ Spmode Mail Android Version 3100
Nttdocomo ≫ Spmode Mail Android Version 3200
Nttdocomo ≫ Spmode Mail Android Version 3300
Nttdocomo ≫ Spmode Mail Android Version 3400
Nttdocomo ≫ Spmode Mail Android Version 4000
Nttdocomo ≫ Spmode Mail Android Version 4200
Nttdocomo ≫ Spmode Mail Android Version 4300
Nttdocomo ≫ Spmode Mail Android Version 4400
Nttdocomo ≫ Spmode Mail Android Version 4500
Nttdocomo ≫ Spmode Mail Android Version 4600
Nttdocomo ≫ Spmode Mail Android Version 4700
Nttdocomo ≫ Spmode Mail Android Version 4800
Nttdocomo ≫ Spmode Mail Android Version 4900
Nttdocomo ≫ Spmode Mail Android Version 5000
Nttdocomo ≫ Spmode Mail Android Version 5100
Nttdocomo ≫ Spmode Mail Android Version 5200
Nttdocomo ≫ Spmode Mail Android Version 5300
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.67% 0.469
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.8 8.6 4.9
AV:N/AC:M/Au:N/C:P/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://jvn.jp/en/jp/JVN82029095/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000037
http://osvdb.org/81629
http://secunia.com/advisories/48955
http://www.securityfocus.com/bid/53254
https://exchange.xforce.ibmcloud.com/vulnerabilities/75159