CVE - CVE-2011-4872

CVE-ID
CVE-2011-4872	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Multiple HTC Android devices including Desire HD FRG83D and GRI40, Glacier FRG83, Droid Incredible FRF91, Thunderbolt 4G FRG83D, Sensation Z710e GRI40, Sensation 4G GRI40, Desire S GRI40, EVO 3D GRI40, and EVO 4G GRI40 allow remote attackers to obtain 802.1X Wi-Fi credentials and SSID via a crafted application that uses the android.permission.ACCESS_WIFI_STATE permission to call the toString method on the WifiConfiguration class.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:51790 URL:http://www.securityfocus.com/bid/51790 BUGTRAQ:20120201 802.1X password exploit on many HTC Android devices URL:http://archives.neohapsis.com/archives/bugtraq/2012-02/0002.html CERT-VN:VU#763355 URL:http://www.kb.cert.org/vuls/id/763355 MISC:http://blog.mywarwithentropy.com/2012/02/8021x-password-exploit-on-many-htc.html SECUNIA:47837 URL:http://secunia.com/advisories/47837
Assigning CNA
CERT/CC
Date Record Created
20111221	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20111221)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)