Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: The iPhone patch is out SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms:

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
The iPhone patch is out

Just what we have been waiting for - the patch is out.  We have received confirmation that the patch has been released by Apple to fix the SMS vulnerability in the iPhone OS.  It looks like the patch has to be downloaded from Apple iTunes.  From the Installation notes:

" iTunes will automatically check Apple's update server on its weekly
schedule. When an update is detected, it will download it. When the
iPhone is docked, iTunes will present the user with the option to
install the update. We recommend applying the update immediately if
possible. Selecting "don't install" will present the option the next
time you connect your iPhone."

The information indicates that it may take up to a week for the automatic update process to pick up the patch. They indicate that you can obtain the update manually via the "Check for Update" button in iTunes.  For more information see Apple's support site.


Deb Hale Long Lines, LLC


279 Posts
ISC Handler
Jul 31st 2009

Sign Up for Free or Log In to start participating in the conversation!