Apple iOS Local Security Bypass Vulnerability

Bugtraq ID:	61574
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	Aug 01 2013 12:00AM
Updated:	Aug 01 2013 12:00AM
Credit:	Billy Lau, Yeongjin Jang, and Chengyu Song
Vulnerable:	Apple iPhone 0 Apple iOS 6.1.3 Apple iOS 4.2.1 Apple iOS 4.0.2 Apple iOS 4.0.1 Apple iOS 3.2.2 Apple iOS 3.2.1 Apple iOS 6.1 Apple iOS 6.0.2 Apple iOS 6.0.1 Apple iOS 6 for Developer Apple iOS 6 Beta 4 Apple iOS 6 Apple iOS 5.1.1 Apple iOS 5.1 Apple iOS 5.0.1 Apple iOS 5 Apple iOS 4.3.5 Apple iOS 4.3.4 Apple iOS 4.3.3 Apple iOS 4.3.2 Apple iOS 4.3.1 Apple iOS 4.3 Apple iOS 4.2.9 Apple iOS 4.2.8 Apple iOS 4.2.7 Apple iOS 4.2.6 Apple iOS 4.2.5 Apple iOS 4.2.10 Apple iOS 4.2 beta Apple iOS 4.2 Apple iOS 4.1 Apple iOS 4 Apple iOS 3.2 Apple iOS 3.1 Apple iOS 3.0 Apple iOS 2.1 Apple iOS 2.0
Not Vulnerable:

Apple iOS Local Security Bypass Vulnerability

Apple iOS is prone to a security-bypass vulnerability.

An attacker with physical access to the affected device can leverage this issue to bypass the intended security mechanisms and inject arbitrary code into the affected device.

Apple iOS Local Security Bypass Vulnerability

To exploit this issue, an attacker would need physical access to the affected device.

Apple iOS Local Security Bypass Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apple iOS Local Security Bypass Vulnerability

References:

• Apple iOS Homepage (Apple)
  
• iPhone Homepage (Apple)
  
• Mactans: Injecting Malware into iOS Devices via Malicious Chargers (UBM Tech)