Lucene search

K
cve[email protected]CVE-2013-5133
HistoryMar 14, 2014 - 10:55 a.m.

CVE-2013-5133

2014-03-1410:55:05
CWE-264
web.nvd.nist.gov
17
cve-2013-5133
apple ios
symlink
restriction bypass
security vulnerability
nvd

8.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:C/A:C

5.8 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

60.0%

Backup in Apple iOS before 7.1 does not properly restrict symlinks, which allows remote attackers to overwrite files during a restore operation via crafted backup data.

Affected configurations

NVD
Node
appleiphone_osRange≀7.0.6
OR
appleiphone_osMatch7.0
OR
appleiphone_osMatch7.0.1
OR
appleiphone_osMatch7.0.2
OR
appleiphone_osMatch7.0.3
OR
appleiphone_osMatch7.0.4
OR
appleiphone_osMatch7.0.5

8.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:C/A:C

5.8 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

60.0%