Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2013-3951
HistoryJun 05, 2013 - 2:39 p.m.

CVE-2013-3951

2013-06-0514:39:55
CWE-20
mitre
web.nvd.nist.gov
44
cve-2013-3951
apple
ios 6.1.3
mac os x 10.8.x
stack_protector.c
libc
openbsd
vulnerability
nvd

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

5.7

Confidence

Low

EPSS

0

Percentile

5.1%

JSON

sys/openbsd/stack_protector.c in libc in Apple iOS 6.1.3 and Mac OS X 10.8.x does not properly parse the Apple strings employed in the user-space stack-cookie implementation, which allows local users to bypass cookie randomization by executing a program with a call-path beginning with the stack-guard= substring, as demonstrated by an iOS untethering attack or an attack against a setuid Mac OS X program.

Affected configurations

Nvd
Node
appleiphone_osRange≤8.2
OR
applemac_os_xRange≤10.10.4
OR
applewatchosRange≤1.0.1
Node
appleiphone_osMatch6.1.3
OR
applemac_os_xMatch10.8.0
OR
applemac_os_xMatch10.8.1
OR
applemac_os_xMatch10.8.2
OR
applemac_os_xMatch10.8.3
OR
applemac_os_xMatch10.8.4
VendorProductVersionCPE
appleiphone_os*cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
applemac_os_x*cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
applewatchos*cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
appleiphone_os6.1.3cpe:2.3:o:apple:iphone_os:6.1.3:*:*:*:*:*:*:*
applemac_os_x10.8.0cpe:2.3:o:apple:mac_os_x:10.8.0:*:*:*:*:*:*:*
applemac_os_x10.8.1cpe:2.3:o:apple:mac_os_x:10.8.1:*:*:*:*:*:*:*
applemac_os_x10.8.2cpe:2.3:o:apple:mac_os_x:10.8.2:*:*:*:*:*:*:*
applemac_os_x10.8.3cpe:2.3:o:apple:mac_os_x:10.8.3:*:*:*:*:*:*:*
applemac_os_x10.8.4cpe:2.3:o:apple:mac_os_x:10.8.4:*:*:*:*:*:*:*

Related

prion 1
cvelist 1
nvd 1
openvas 1
securityvulns 6
nessus 1
prion
prion
Path traversal
2013-06-05 14:39:00
cvelist
cvelist
CVE-2013-3951
2013-06-05 10:00:00
nvd
nvd
CVE-2013-3951
2013-06-05 14:39:55
openvas
openvas
Apple Mac OS X Multiple Vulnerabilities - 01 (Jan 2014)
2014-01-20 00:00:00
securityvulns
securityvulns
APPLE-SA-2015-09-21-1 watchOS 2
2015-10-05 00:00:00
Apple watchOS security vulnerabilities
2015-10-25 00:00:00
APPLE-SA-2015-09-30-3 OS X El Capitan 10.11
2015-10-05 00:00:00
nessus
nessus
Mac OS X < 10.11 Multiple Vulnerabilities (GHOST)
2015-10-05 00:00:00

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

5.7

Confidence

Low

EPSS

0

Percentile

5.1%

JSON
Related for CVE-2013-3951
prion1cvelist1nvd1openvas1securityvulns6nessus1