Unrated severityNVD Advisory· Published Mar 14, 2009· Updated Apr 23, 2026
CVE-2009-0143
CVE-2009-0143
Description
Apple iTunes before 8.1 does not properly inform the user about the origin of an authentication request, which makes it easier for remote podcast servers to trick a user into providing a username and password when subscribing to a crafted podcast.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
9- lists.apple.com/archives/security-announce//2009/Mar/msg00001.htmlnvdMailing ListPatchVendor Advisory
- support.apple.com/kb/HT3487nvdPatchVendor Advisory
- secunia.com/advisories/34254nvdThird Party Advisory
- securitytracker.com/idnvdThird Party AdvisoryVDB Entry
- www.securityfocus.com/bid/34094nvdThird Party AdvisoryVDB Entry
- www.vupen.com/english/advisories/2009/0702nvdThird Party Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/49201nvdThird Party AdvisoryVDB Entry
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5336nvdThird Party Advisory
- osvdb.org/52579nvdBroken Link
News mentions
0No linked articles in our index yet.