CVE-2013-0979

lockdownd in Lockdown in Apple iOS before 6.1.3 does not properly consider file types during the permission-setting step of a backup restoration, which allows local users to change the permissions of arbitrary files via a backup that contains a pathname with a symlink.

Published: Mar 20, 2013
Updated: Apr 13, 2023
CVE: CVE-2013-0979
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 1.9
AV:L/AC:M/Au:N/C:N/I:P/A:N

CWEs:

CWE-264

Affected Software
References

Software	From	Fixed in
apple / iphone_os	2.0.2	2.0.2.x
apple / iphone_os	3.0	3.0.x
apple / iphone_os	3.2	3.2.x
apple / iphone_os	3.1.3	3.1.3.x
apple / iphone_os	1.0.2	1.0.2.x
apple / iphone_os	1.1.2	1.1.2.x
apple / iphone_os	4.3.2	4.3.2.x
apple / iphone_os	4.0.2	4.0.2.x
apple / iphone_os	2.2	2.2.x
apple / iphone_os	4.0.1	4.0.1.x
apple / iphone_os	1.1.1	1.1.1.x
apple / iphone_os	5.1	5.1.x
apple / iphone_os	4.2.8	4.2.8.x
apple / iphone_os	6.0.2	6.0.2.x
apple / iphone_os	4.1	4.1.x
apple / iphone_os	2.0.0	2.0.0.x
apple / iphone_os	3.1.2	3.1.2.x
apple / iphone_os	3.0.1	3.0.1.x
apple / iphone_os	1.1.3	1.1.3.x
apple / iphone_os	4.3.5	4.3.5.x
apple / iphone_os	4.3.1	4.3.1.x
apple / iphone_os	4.2.5	4.2.5.x
apple / iphone_os	3.2.1	3.2.1.x
apple / iphone_os	3.1	3.1.x
apple / iphone_os	-	6.1.2.x
apple / iphone_os	2.0.1	2.0.1.x
apple / iphone_os	1.1.5	1.1.5.x
apple / iphone_os	1.1.0	1.1.0.x
apple / iphone_os	1.1.4	1.1.4.x
apple / iphone_os	1.0.1	1.0.1.x
apple / iphone_os	2.1	2.1.x
apple / iphone_os	6.0	6.0.x
apple / iphone_os	6.1	6.1.x
apple / iphone_os	4.2.1	4.2.1.x
apple / iphone_os	5.0.1	5.0.1.x
apple / iphone_os	5.0	5.0.x
apple / iphone_os	2.2.1	2.2.1.x
apple / iphone_os	4.3.3	4.3.3.x
apple / iphone_os	4.0	4.0.x
apple / iphone_os	2.1.1	2.1.1.x
apple / iphone_os	1.0.0	1.0.0.x
apple / iphone_os	5.1.1	5.1.1.x
apple / iphone_os	2.0	2.0.x
apple / iphone_os	4.3.0	4.3.0.x
apple / iphone_os	3.2.2	3.2.2.x
apple / iphone_os	6.0.1	6.0.1.x

Vulnerability Database

CVE-2013-0979