What is CVE-2013-0979?

CVE-2013-0979 is a vulnerability in Apple Iphone OS, classified under CWE-264. Published 2013-03-20.

Is CVE-2013-0979 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Apple Iphone OS

CVE-2013-0979

lockdownd in Lockdown in Apple iOS before 6.1.3 does not properly consider file types during the permission-setting step of a backup restoration, which allows local users to change the permissions of arbitrary files via a backup that contains a pathname with a symlink.

EPSS: 0.003 (22.0th percentile) — read the EPSS interpretation.

Affected products

Apple Iphone_os — versions 1.0.0, 1.0.1, 1.0.2
N/a — versions n/a

Weakness classification (CWE)

CWE-264

Public proof-of-concept exploits

weezy37/Day-1

References

product-security@apple.com (vendor-advisory, x_refsource_APPLE, Vendor Advisory)
product-security@apple.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2013-0979?: CVE-2013-0979 is a vulnerability in Apple Iphone OS, classified under CWE-264. Published 2013-03-20.
Is CVE-2013-0979 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.