Apple iOS < 7.0 Multiple Vulnerabilities

Critical Nessus Network Monitor Plugin ID 8013

Synopsis

The remote host is missing a critical Apple iOS patch update.

Description

According to its banner, the remote Apple iOS device is missing a security update. Versions of Apple iOS older than 7.0 are affected by vulnerabilities within the following components :

- Certificate Trust Policy
- CoreGraphics
- CoreMedia
- Data Protection
- Data Security
- File Systems
- IOKit
- IOKitUser
- IOSerialFamily
- IPSec
- ImageIO
- Kernel
- Kext Management
- Passcode Lock
- Personal Hotspot
- Push Notifications
- Safari
- Sandbox
- Social
- Springboard
- Telephony
- Twitter
- WebKit
- dyld
- libxml
- libxslt

Solution

Upgrade to Apple iOS 7.0 or later.

See Also

http://support.apple.com/kb/HT5934

Plugin Details

Severity: Critical

ID: 8013

File Name: 8013.prm

Published: 2011/09/20

Modified: 2016/12/09

Dependencies: 8637

Nessus ID: 69984

Risk Information

Risk Factor: Critical

CVSSv2

Base Score: 10

Temporal Score: 7.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

CVSSv3

Base Score: 9.8

Temporal Score: 8.5

Vector: CVSS3#AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS3#E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/o:apple:iphone_os

Patch Publication Date: 2011/09/18

Vulnerability Publication Date: 2010/09/18

Reference Information

CVE: CVE-2011-2391, CVE-2011-3102, CVE-2012-0841, CVE-2012-2807, CVE-2012-2825, CVE-2012-2870, CVE-2012-2871, CVE-2013-0879, CVE-2013-0926, CVE-2013-0957, CVE-2013-0991, CVE-2013-0992, CVE-2013-0993, CVE-2013-0994, CVE-2013-0995, CVE-2013-0996, CVE-2013-0997, CVE-2013-0998, CVE-2013-0999, CVE-2013-1000, CVE-2013-1001, CVE-2013-1002, CVE-2013-1003, CVE-2013-1004, CVE-2013-1005, CVE-2013-1006, CVE-2013-1007, CVE-2013-1008, CVE-2013-1010, CVE-2013-1012, CVE-2013-1019, CVE-2013-1025, CVE-2013-1026, CVE-2013-1028, CVE-2013-1036, CVE-2013-1037, CVE-2013-1038, CVE-2013-1039, CVE-2013-1040, CVE-2013-1041, CVE-2013-1042, CVE-2013-1043, CVE-2013-1044, CVE-2013-1045, CVE-2013-1046, CVE-2013-1047, CVE-2013-2842, CVE-2013-2848, CVE-2013-3950, CVE-2013-3953, CVE-2013-3954, CVE-2013-3955, CVE-2013-4616, CVE-2013-5125, CVE-2013-5126, CVE-2013-5127, CVE-2013-5128, CVE-2013-5129, CVE-2013-5131, CVE-2013-5137, CVE-2013-5138, CVE-2013-5139, CVE-2013-5140, CVE-2013-5141, CVE-2013-5142, CVE-2013-5145, CVE-2013-5147, CVE-2013-5149, CVE-2013-5150, CVE-2013-5151, CVE-2013-5152, CVE-2013-5153, CVE-2013-5154, CVE-2013-5155, CVE-2013-5156, CVE-2013-5157, CVE-2013-5158, CVE-2013-5159

BID: 52107, 54718, 59944, 59953, 59954, 59955, 59956, 59957, 59958, 59959, 59960, 59963, 59964, 59965, 59967, 59970, 59971, 59972, 59973, 59976, 59977, 60067, 60073, 60102, 60361, 60437, 60441, 60443, 60444, 60616, 62368, 62369, 62371, 62520, 62521, 62522, 62523, 62524, 62526, 62527, 62529, 62530, 62531, 62532, 62533, 62534, 62535, 62536, 62537, 62539, 62541, 62542, 62543, 62551, 62553, 62554, 62555, 62556, 62557, 62558, 62559, 62560, 62561, 62563, 62565, 62566, 62567, 62568, 62569, 62570, 62571, 62573

IAVA: 2012-A-0148, 2012-A-0153, 2013-A-0031