PT-2014-2907 · Apple · Ios

Evad3Rs · Publicado 2014-03-14 · Atualizado 2014-03-14 · CVE-2013-5133

Positive Technologies (AI Summary)

CVSS v2.0

8.8

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1

Description The issue concerns a problem with backup restrictions in Apple iOS. Specifically, it does not properly restrict symlinks, allowing remote attackers to overwrite files during a restore operation via crafted backup data.

Recommendations For Apple iOS versions prior to 7.1, update to version 7.1 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-5133

Produtos afetados

Ios

Referências · 2

• http://support.apple.com/kb/HT6162 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-5133 · Nota de Segurança