CVE-2008-4229
Last modified
CVE-2008-4229 is a vulnerability of currently unknown severity. Race condition in the Passcode Lock feature in Apple iPhone OS 2.0 through 2.1 and iPhone OS for iPod touch 2.0 through 2.1 allows physically proximate attackers to remove the lock and launch arbitrary applications by restoring the device from a backup.. EPSS estimates a 0.24% chance of exploitation in the next 30 days.
Description
Race condition in the Passcode Lock feature in Apple iPhone OS 2.0 through 2.1 and iPhone OS for iPod touch 2.0 through 2.1 allows physically proximate attackers to remove the lock and launch arbitrary applications by restoring the device from a backup.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Apple | Iphone Os | 1.0 |
| Apple | Iphone Os | 1.0.1 |
| Apple | Iphone Os | 1.0.2 |
| Apple | Iphone Os | 1.1 |
| Apple | Iphone Os | 1.1.1 |
| Apple | Iphone Os | 1.1.2 |
| Apple | Iphone Os | 1.1.3 |
| Apple | Iphone Os | 1.1.4 |
| Apple | Iphone Os | 1.1.5 |
| Apple | Iphone Os | 2.0 |
| Apple | Iphone Os | 2.0.1 |
| Apple | Iphone Os | 2.0.2 |
| Apple | Iphone Os | 2.1 |
References
- http://support.apple.com/kb/HT3318Vendor Advisory
- http://support.apple.com/kb/HT3318Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2008-4229?
How severe is CVE-2008-4229?
How do I fix CVE-2008-4229?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2008
- CVE-2008-4223Podcast Producer in Apple Mac OS X 10.5 before 10.5.6 allows…
- CVE-2008-4224UDF in Apple Mac OS X before 10.5.6 allows user-assisted att…
- CVE-2008-4225Integer overflow in the xmlBufferResize function in libxml2 …
- CVE-2008-4226Integer overflow in the xmlSAX2Characters function in libxml…
- CVE-2008-4227Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch…
- CVE-2008-4228The Passcode Lock feature in Apple iPhone OS 1.0 through 2.1…
- CVE-2008-4230The Passcode Lock feature in Apple iPhone OS 1.0 through 2.1…
- CVE-2008-4231Safari in Apple iPhone OS 1.0 through 2.1 and iPhone OS for …
- CVE-2008-4232Safari in Apple iPhone OS 2.0 through 2.1 and iPhone OS for …
- CVE-2008-4233Safari in Apple iPhone OS 1.0 through 2.1 and iPhone OS for …
- CVE-2008-4234Incomplete blacklist vulnerability in the Quarantine feature…
- CVE-2008-4236Apple Type Services (ATS) in Apple Mac OS X 10.5 before 10.5…
Are you affected by CVE-2008-4229?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST