CVE-2013-5133

iPhone OS < 7.1 - Arbitrary File Overwrite via Symlink in Backup Restore

Title source: llm
STIX 2.1

Description

Backup in Apple iOS before 7.1 does not properly restrict symlinks, which allows remote attackers to overwrite files during a restore operation via crafted backup data.

References (1)

Core 1
Core References
Vendor Advisory x_refsource_confirm
http://support.apple.com/kb/HT6162

Scores

EPSS 0.0174
EPSS Percentile 75.4%

Details

CWE
CWE-264
Status published
Products (7)
apple/iphone_os 7.0
apple/iphone_os 7.0.1
apple/iphone_os 7.0.2
apple/iphone_os 7.0.3
apple/iphone_os 7.0.4
apple/iphone_os 7.0.5
apple/iphone_os < 7.0.6
Published Mar 14, 2014
Tracked Since Feb 18, 2026