Total vulnerabilities in the database
The Profiles component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1, when installing a configuration profile, can replace the password policy from Exchange ActiveSync with a weaker password policy, which allows physically proximate attackers to bypass the intended policy.
| Software | From | Fixed in |
|---|---|---|
| apple / iphone_os | 1.0.0 | 1.0.0.x |
| apple / iphone_os | 1.0.1 | 1.0.1.x |
| apple / iphone_os | 1.0.2 | 1.0.2.x |
| apple / iphone_os | 1.1.0 | 1.1.0.x |
| apple / iphone_os | 1.1.1 | 1.1.1.x |
| apple / iphone_os | 1.1.2 | 1.1.2.x |
| apple / iphone_os | 1.1.3 | 1.1.3.x |
| apple / iphone_os | 1.1.4 | 1.1.4.x |
| apple / iphone_os | 1.1.5 | 1.1.5.x |
| apple / iphone_os | 2.0 | 2.0.x |
| apple / iphone_os | 2.0.0 | 2.0.0.x |
| apple / iphone_os | 2.0.1 | 2.0.1.x |
| apple / iphone_os | 2.0.2 | 2.0.2.x |
| apple / iphone_os | 2.1 | 2.1.x |
| apple / iphone_os | 2.1.1 | 2.1.1.x |
| apple / iphone_os | 2.2 | 2.2.x |
| apple / iphone_os | 2.2.1 | 2.2.1.x |
| apple / iphone_os | - | - |
| apple / ipod_touch | - | - |