Arbitrary File Permission Change Vulnerability in Apple iOS Lockdownd

CVE-2013-0979 · LOW Severity

AV:L/AC:M/AU:N/C:N/I:P/A:N

lockdownd in Lockdown in Apple iOS before 6.1.3 does not properly consider file types during the permission-setting step of a backup restoration, which allows local users to change the permissions of arbitrary files via a backup that contains a pathname with a symlink.

Learn more about our Cis Benchmark Audit For Apple Ios.