CVE

Id
71668  
CVE No.
CVE-2014-4372  
Status
Candidate  
Description
syslogd in the syslog subsystem in Apple iOS before 8 and Apple TV before 7 allows local users to change the permissions of arbitrary files via a symlink attack on an unspecified file.  
Phase
Assigned (20140620)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
680874 71668 CVE-2014-4372 CONFIRM:http://support.apple.com/kb/HT6441  View
680875 71668 CVE-2014-4372 CONFIRM:http://support.apple.com/kb/HT6442  View
680876 71668 CVE-2014-4372 APPLE:APPLE-SA-2014-09-17-1  View
680877 71668 CVE-2014-4372 URL:http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html  View
680878 71668 CVE-2014-4372 APPLE:APPLE-SA-2014-09-17-2  View
680879 71668 CVE-2014-4372 URL:http://archives.neohapsis.com/archives/bugtraq/2014-09/0107.html  View
680880 71668 CVE-2014-4372 BID:69882  View
680881 71668 CVE-2014-4372 URL:http://www.securityfocus.com/bid/69882  View
680882 71668 CVE-2014-4372 BID:69923  View
680883 71668 CVE-2014-4372 URL:http://www.securityfocus.com/bid/69923  View
680884 71668 CVE-2014-4372 SECTRACK:1030866  View
680885 71668 CVE-2014-4372 URL:http://www.securitytracker.com/id/1030866  View
680886 71668 CVE-2014-4372 XF:appleios-cve20144372-symlink(96082)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15435 JVNDB-2014-004310 Apple iOS および Apple TV の IOHIDFamily カーネルエクステンションにおける任意のコードを実行される脆弱性 Apple iOS および Apple TV の IOHIDFamily カーネルエクステンションは、書き込み操作に対する適切なチェックが不足しているため、任意のコードを実行される脆弱性が存在します。 CVE-2014-4380 71668 9.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004310.html  View