Apple iPhone Missed Call Notification Lock Screen Security Bypass Vulnerability

Bugtraq ID:	52124
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	Feb 22 2012 12:00AM
Updated:	Feb 22 2012 12:00AM
Credit:	Safwan Saba
Vulnerable:	Apple iOS 5.0.1 Apple iOS 5
Not Vulnerable:

Apple iPhone Missed Call Notification Lock Screen Security Bypass Vulnerability

Apple iPhone is prone to a security-bypass vulnerability due to a failure to restrict access to locked devices.

An attacker with physical access to a locked device can exploit this issue to bypass the passcode and gain unauthorized access to the affected device.

Apple iOS 5 is vulnerable; other versions may also be affected.

Apple iPhone Missed Call Notification Lock Screen Security Bypass Vulnerability

An attacker can exploit this issue using readily available tools.

Apple iPhone Missed Call Notification Lock Screen Security Bypass Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apple iPhone Missed Call Notification Lock Screen Security Bypass Vulnerability

References:

• iOS 5 Flaw Allows Unfettered Access to User's Contacts, Calls (Christopher Brook)
  
• iPhone Homepage (Apple)