Apple iOS < 7.0.3 Multiple Security Bypass Vulnerabilities

This script is Copyright (C) 2013-2014 Tenable Network Security, Inc.


Synopsis :

The version of iOS running on the mobile device is affected by
multiple security bypass vulnerabilities.

Description :

The mobile device is running a version of iOS that is older than
version 7.0.3. It is, therefore, affected by multiple, security bypass
vulnerabilities. An attacker could potentially bypass the security lock
and make calls.

See also :

http://support.apple.com/kb/HT6010
http://www.nessus.org/u?955757bc

Solution :

Upgrade to iOS 7.0.3 or later.

Risk factor :

Low / CVSS Base Score : 2.1
(CVSS2#AV:L/AC:L/Au:N/C:N/I:P/A:N)
CVSS Temporal Score : 1.8
(CVSS2#E:ND/RL:OF/RC:C)
Public Exploit Available : true

Family: Mobile Devices

Nessus Plugin ID: 70562 ()

Bugtraq ID: 63276
63277
63278

CVE ID: CVE-2013-5144
CVE-2013-5162
CVE-2013-5164