Vulnerabilities > T Mobile

DATE CVE VULNERABILITY TITLE RISK
2012-08-21 CVE-2012-2980 Credentials Management vulnerability in multiple products
The Samsung and HTC onTouchEvent method implementation for Android on the T-Mobile myTouch 3G Slide, HTC Merge, Sprint EVO Shift 4G, HTC ChaCha, AT&T Status, HTC Desire Z, T-Mobile G2, T-Mobile myTouch 4G Slide, and Samsung Galaxy S stores touch coordinates in the dmesg buffer, which allows remote attackers to obtain sensitive information via a crafted application, as demonstrated by PIN numbers, telephone numbers, and text messages.
7.1
2012-07-03 CVE-2011-2716 Improper Input Validation vulnerability in multiple products
The DHCP client (udhcpc) in BusyBox before 1.20.0 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in the (1) HOST_NAME, (2) DOMAIN_NAME, (3) NIS_DOMAIN, and (4) TFTP_SERVER_NAME host name options.
high complexity
t-mobile busybox CWE-20
6.8
2007-04-02 CVE-2007-1823 Remote Security vulnerability in Voice Mail Systems
T-Mobile voice mail systems allow remote attackers to retrieve or remove messages, or reconfigure mailboxes, by spoofing Calling Number Identification (CNID, aka Caller ID).
network
low complexity
t-mobile
critical
10.0