[Forgot Password]
Login  Register Subscribe

30481

 
 

423868

 
 

255716

 
 

909

 
 

198991

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2013-0979Date: (C)2013-03-20   (M)2023-12-22


lockdownd in Lockdown in Apple iOS before 6.1.3 does not properly consider file types during the permission-setting step of a backup restoration, which allows local users to change the permissions of arbitrary files via a backup that contains a pathname with a symlink.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 1.9
Exploit Score: 3.4
Impact Score: 2.9
 
CVSS V2 Metrics:
Access Vector: LOCAL
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: NONE
Integrity: PARTIAL
Availability: NONE
  
Reference:
APPLE-SA-2013-03-19-1
http://support.apple.com/kb/HT5704

CPE    71
cpe:/o:apple:iphone_os:4.3.0
cpe:/o:apple:iphone_os:4.3.3
cpe:/o:apple:iphone_os:4.3.2
cpe:/o:apple:iphone_os:4.3.1
...
CWE    1
CWE-264

© SecPod Technologies