Description
lockdownd in Lockdown in Apple iOS before 6.1.3 does not properly consider file types during the permission-setting step of a backup restoration, which allows local users to change the permissions of arbitrary files via a backup that contains a pathname with a symlink.
References (2)
Core 2
Core References
Vendor Advisory vendor-advisory
x_refsource_apple
http://lists.apple.com/archives/security-announce/2013/Mar/msg00004.html
Vendor Advisory x_refsource_confirm
http://support.apple.com/kb/HT5704
Scores
EPSS
0.0030
EPSS Percentile
22.0%
Details
CWE
CWE-264
Status
published
Products (30)
apple/iphone_os
1.0.0
apple/iphone_os
1.0.1
apple/iphone_os
1.0.2
apple/iphone_os
1.1.0 (2 CPE variants)
apple/iphone_os
1.1.1
apple/iphone_os
1.1.2 (2 CPE variants)
apple/iphone_os
1.1.3 (2 CPE variants)
apple/iphone_os
1.1.4 (2 CPE variants)
apple/iphone_os
1.1.5 (2 CPE variants)
apple/iphone_os
2.0
... and 20 more
Published
Mar 20, 2013
Tracked Since
Feb 18, 2026