Apple Releases iOS 4.3.5 to Address Certificate Validation Issue


Submitted by Dan; July 27, 2011
Shortly after releasing iOS 4.3.4, Apple has released iOS 4.3.5 to address a rather serious security vulnerability.
iOS 4.3.5 Software Update Fixes a security vulnerability with certificate validation.
From the Apple posted support document:
Impact: An attacker with a privileged network position may capture or modify data in sessions protected by SSL/TLS Description: A certificate chain validation issue existed in the handling of X.509 certificates. An attacker with a privileged network position may capture or modify data in sessions protected by SSL/TLS. Other attacks involving X.509 certificate validation may also be possible. This issue is addressed through improved validation of X.509 certificate chains.
The new version checks in as Build 8L1, and is for the GSM iPhone 4, iPhone 3GS, all iPads, and the third- and-fourth-generation iPod touch. A separate iOS 4.2.10 (Build 8E600) is available for the CDMA iPhone. Downloads: Coming up shortly


Tags: 4.3.5, Apple, Firmware, iOS, iPad, iphone, iPod Touch



Related Stories:




Become a Member of Dashhacks!

If you want your comments to go live without waiting for moderation, you need to be logged in. Being logged in has its benefits:
  • Logged in members do not wait for their comments to be approved.
  • Logged in members can sign up for nightly updates.
  • Logged in members can create Profiles to be seen by other users.
So why wait? Create an account or login now! It's easy, quick, and free.

To get started, use the LOGIN boxes, or the REGISTER link at the top right!

Comments 


 
# Usman Majeed 2011-07-28 01:06
The best site I've used so far (and trust me I've used a lot) is http://www.unlockinc.com they are effective and simple in unlocking iPhones and other iDevice's.

Just wanted to pass it on since there are a lot of non-legitimate sites out there.

Reply
 

 
# Austin Edward Young 2011-07-30 10:44
alright im new to the scene n i just jailbroke this ios

Reply
 

 
# maddison 2012-01-23 05:06
I've always felt a bit scared to handle certificate validation software because it's never the same and I am afraid not to do something wrong. That's mainly because I had a dll file extension error once and it got me unprepared at the time.

Reply
 

Add comment

Security code
Refresh




 
CREATE ACCOUNT NOW TO POST COMMENTS!

Why create an account on the Dashhacks network? Because being logged in has its privileges!

• COMMENTS! Only logged in users comments go live without waiting for moderator approval!
• No video! The video ad in the upper right doesn't interrupt you on all pages!
• Customize your profile! Flaunt your xBox Live & PSN gamertags!
• It's FREE and it's EASY! And one login works for all of the Dashhacks review sites!

So what are you waiting for?

Go to the TOP RIGHT of the page and LOGIN or click REGISTER!