PT-2015-1914 · Apple · Ios

Publicado 2015-08-06 · Atualizado 2016-12-24 · CVE-2015-5766

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.4.1

Description The issue allows attackers to access arbitrary filesystem locations due to a directory traversal vulnerability in the Air Traffic component. This is caused by incorrect restriction of the path name to a directory with limited access. Exploitation of the vulnerability may allow a remote attacker to access arbitrary objects in the file system.

Recommendations For versions prior to 8.4.1, update to version 8.4.1 or later to resolve the issue.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

BDU:2015-11260

CVE-2015-5766

Produtos afetados

Ios

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2015-5766 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-11260 · Nota de Segurança
• https://support.apple.com/kb/HT205030 · Aviso do Fabricante
• http://securitytracker.com/id/1033275 · Nota
• http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html · Aviso do Fabricante
• http://securityfocus.com/bid/76337 · Nota