The Settings component in Apple iOS before 5, when a configuration profile is used for a locale other than English, does not properly implement localization, which makes it easier for attackers to have an unspecified impact by leveraging incorrect configuration display.
http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html