Apple iOS Networking Packet Filter Rules Local Privilege Escalation Vulnerability

Bugtraq ID:	45010
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2010-3830
Remote:	No
Local:	Yes
Published:	Nov 22 2010 12:00AM
Updated:	Dec 31 2010 07:33AM
Credit:	Apple
Vulnerable:	Apple iOS 4.0.2 Apple iOS 4.0.1 Apple iOS 3.2.2 Apple iOS 3.2.1 Apple iOS 4.1 Apple iOS 4 Apple iOS 3.2 Apple iOS 2.1 Apple iOS 2.0
Not Vulnerable:	Apple iOS 4.2.1 Apple iOS 4.2

Apple iOS Networking Packet Filter Rules Local Privilege Escalation Vulnerability

Apple iOS is prone to a local privilege-escalation vulnerability.

Local attackers running malicious code can exploit this issue to elevate their privileges. Successful attacks will completely compromise an affected device.

Apple iOS Networking Packet Filter Rules Local Privilege Escalation Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/45010.c

Apple iOS Networking Packet Filter Rules Local Privilege Escalation Vulnerability

Solution:
Updates are available; please see the references for more information.