PT-2013-4756

CVE-2013-3951

·

Published

2013-06-05

·

Updated

2016-12-08

Description by

CVSS 2.0
4.6
Medium
MetricsAV:L/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions libc in Apple iOS versions 6.1.3 libc in Apple Mac OS X versions 10.8.x
Description The issue allows local users to bypass cookie randomization by executing a program with a call-path beginning with the stack-guard= substring. This can be demonstrated by an iOS untethering attack or an attack against a setuid Mac OS X program.
Recommendations For Apple iOS version 6.1.3, update to a newer version that contains a fix for this issue. For Apple Mac OS X version 10.8.x, update to a newer version that contains a fix for this issue.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-20: Improper Input Validation
Related identifiers
CVE-2013-3951
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com