PT-2014-2558 · Libimobiledevice · Libimobiledevice

Paul Collinson · Published 2013-08-17 · Updated 2014-01-21 · CVE-2013-2142

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:L/AC:M/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions libimobiledevice version 1.1.4

Description The issue allows local users to overwrite arbitrary files via a symlink attack on certain files in /tmp/root/.config/libimobiledevice/ when $HOME and $XDG CONFIG HOME are not set. The affected files include HostCertificate.pem, HostPrivateKey.pem, libimobiledevicerc, RootCertificate.pem, and RootPrivateKey.pem.

Recommendations For libimobiledevice version 1.1.4, consider setting $HOME and $XDG CONFIG HOME environment variables to prevent the symlink attack. As a temporary workaround, restrict write access to the /tmp/root/.config/libimobiledevice/ directory to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2013-2142

MGASA-2013-0251

OPENSUSE-SU-2024:10459-1

Affected Products

Libimobiledevice

References · 12

• 🔥 https://bugs.launchpad.net/ubuntu/%2Bsource/libimobiledevice/%2Bbug/1164263 · Exploit
• https://security-tracker.debian.org/tracker/CVE-2013-2142 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-2142 · Security Note
• http://ubuntu.com/usn/USN-1927-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2013-2142 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2013-0251.html · Security Note
• https://osv.dev/vulnerability/MGASA-2013-0251 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2013-2142 · Vendor Advisory
• https://bugs.mageia.org/show_bug.cgi?id=11010 · Note
• http://openwall.com/lists/oss-security/2013/06/04/11 · Note
• http://ubuntu.com/usn/usn-1927-1 · Note
• http://libiphone.lighthouseapp.com/projects/27916-libiphone/tickets/331-insecure-tmp-directory-use · Note