Apple iOS 6.1.3 Lock Screen Security Bypass Vulnerability

Bugtraq ID:	58633
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	Mar 20 2013 12:00AM
Updated:	Mar 20 2013 12:00AM
Credit:	videosdebarraquito
Vulnerable:	Apple iOS 6.1.3
Not Vulnerable:

Apple iOS 6.1.3 Lock Screen Security Bypass Vulnerability

Apple iOS is prone to a security-bypass vulnerability due to a failure to restrict access to locked devices.

An attacker with physical access to a locked device can leverage this issue to bypass the lock screen and gain unauthorized access to the phone application there by disclose sensitive information.

Apple iOS 6.1.3 is vulnerable; other versions may also be affected.

Apple iOS 6.1.3 Lock Screen Security Bypass Vulnerability

A video demonstrating the issue is available. Please see the references for more information.

Apple iOS 6.1.3 Lock Screen Security Bypass Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apple iOS 6.1.3 Lock Screen Security Bypass Vulnerability

References:

• Apple iOS 6.1.3 fix contains another lock screen bypass flaw (videosdebarraquito)
  
• iPhone Homepage (Apple)