Description
The UIKit component in Apple iPhone OS 3.0, and iPhone OS 3.0.1 for iPod touch, allows physically proximate attackers to discover a password by watching a user undo deletions of characters in the password.
References
- ipod-iphone-password-info-disclosure(53185) vdb-entry
- 36335 vdb-entry
- APPLE-SA-2009-09-09-1 vendor-advisory
- 36677 third-party-advisory
- http://support.apple.com/kb/HT3860