NetSight
low1.9

CVE-2013-0979

lockdownd in Lockdown in Apple iOS before 6.1.3 does not properly consider file types during the permission-setting step of a backup restoration, which allows …

Impact

lockdownd in Lockdown in Apple iOS before 6.1.3 does not properly consider file types during the permission-setting step of a backup restoration, which allows local users to change the permissions of arbitrary files via a backup that contains a pathname with a symlink.

Affected products

VendorProductAffected versions
AppleIphone Os
through 6.1.2
Versions 1.0.0, 1.0.1, 1.0.2, 1.1.0, 1.1.1

Weakness classification

References