CVE-2013-0963
published 2013-01-29CVE-2013-0963: Identity Services in Apple iOS before 6.1 does not properly handle validation failures of AppleID certificates, which might allow physically proximate…
PriorityP410low2.1CVSS 2.0
AVLACLAuNCNIPAN
EPSS
0.21%
11.6th percentile
Identity Services in Apple iOS before 6.1 does not properly handle validation failures of AppleID certificates, which might allow physically proximate attackers to bypass authentication by leveraging an incorrect assignment of an empty string value to an AppleID.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | iphone_os | <= 6.0.2 | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2013-2442 Oracle JDK: unspecified vulnerability fixed in 7u25 (Deployment)
bugzilla·2013-06-19·CVSS 7.5
CVE-2013-2442 [HIGH] CVE-2013-2442 Oracle JDK: unspecified vulnerability fixed in 7u25 (Deployment)
CVE-2013-2442 Oracle JDK: unspecified vulnerability fixed in 7u25 (Deployment)
Oracle Java SE 7 Update 25 fixes an unspecified vulnerability in the Deployment component (CVE-2013-2442). Upstream has CVSSv2 scored this issue as: 7.5/AV:N/AC:L/Au:N/C:P/I:P/A:P
External Reference:
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html
Discussion:
This issue has been addressed in following products:
Supplementary for Red Hat Enterprise Linux 5
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2013:0963 https://rhn.redhat.com/errata/RHSA-2013-0963.html
---
This issue has been addressed in following products:
Supplementary for Red Hat Enterprise Linux 5
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2013:1060 https://rhn.redhat.com/errata/RHSA-2013-10
Bugzilla
CVE-2013-2462 Oracle JDK: unspecified vulnerability fixed in 7u25 (Deployment)
bugzilla·2013-06-19·CVSS 9.3
CVE-2013-2462 [CRITICAL] CVE-2013-2462 Oracle JDK: unspecified vulnerability fixed in 7u25 (Deployment)
CVE-2013-2462 Oracle JDK: unspecified vulnerability fixed in 7u25 (Deployment)
Oracle Java SE 7 Update 25 fixes an unspecified vulnerability in the Deployment component (CVE-2013-2462). Upstream has CVSSv2 scored this issue as: 9.3/AV:N/AC:M/Au:N/C:C/I:C/A:C
External Reference:
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html
Discussion:
This issue has been addressed in following products:
Supplementary for Red Hat Enterprise Linux 5
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2013:0963 https://rhn.redhat.com/errata/RHSA-2013-0963.html
---
This issue has been addressed in following products:
Supplementary for Red Hat Enterprise Linux 5
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2013:1060 https://rhn.redhat.com/errata/RHSA-2013-10
Bugzilla
CVE-2013-2466 Oracle JDK: unspecified vulnerability fixed in 7u25 (Deployment)
bugzilla·2013-06-19·CVSS 10.0
CVE-2013-2466 [CRITICAL] CVE-2013-2466 Oracle JDK: unspecified vulnerability fixed in 7u25 (Deployment)
CVE-2013-2466 Oracle JDK: unspecified vulnerability fixed in 7u25 (Deployment)
Oracle Java SE 7 Update 25 fixes an unspecified vulnerability in the Deployment component (CVE-2013-2466). Upstream has CVSSv2 scored this issue as: 10.0/AV:N/AC:L/Au:N/C:C/I:C/A:C
External Reference:
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html
Discussion:
This issue has been addressed in following products:
Supplementary for Red Hat Enterprise Linux 5
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2013:0963 https://rhn.redhat.com/errata/RHSA-2013-0963.html
---
This issue has been addressed in following products:
Supplementary for Red Hat Enterprise Linux 5
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2013:1060 https://rhn.redhat.com/errata/RHSA-2013-1
Bugzilla
CVE-2013-3744 Oracle JDK: unspecified vulnerability fixed in 7u25 (Deployment)
bugzilla·2013-06-19·CVSS 5.0
CVE-2013-3744 [MEDIUM] CVE-2013-3744 Oracle JDK: unspecified vulnerability fixed in 7u25 (Deployment)
CVE-2013-3744 Oracle JDK: unspecified vulnerability fixed in 7u25 (Deployment)
Oracle Java SE 7 Update 25 fixes an unspecified vulnerability in the Deployment component (CVE-2013-3744). Upstream has CVSSv2 scored this issue as: 5.0/AV:N/AC:L/Au:N/C:N/I:P/A:N
External Reference:
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html
Discussion:
This issue has been addressed in following products:
Supplementary for Red Hat Enterprise Linux 5
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2013:0963 https://rhn.redhat.com/errata/RHSA-2013-0963.html
---
This issue has been addressed in following products:
Supplementary for Red Hat Enterprise Linux 5
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2013:1060 https://rhn.redhat.com/errata/RHSA-2013-10
Bugzilla
CVE-2013-2400 Oracle JDK: unspecified vulnerability fixed in 7u25 (Deployment)
bugzilla·2013-06-19·CVSS 5.0
CVE-2013-2400 [MEDIUM] CVE-2013-2400 Oracle JDK: unspecified vulnerability fixed in 7u25 (Deployment)
CVE-2013-2400 Oracle JDK: unspecified vulnerability fixed in 7u25 (Deployment)
Oracle Java SE 7 Update 25 fixes an unspecified vulnerability in the Deployment component (CVE-2013-2400). Upstream has CVSSv2 scored this issue as: 5.0/AV:N/AC:L/Au:N/C:N/I:P/A:N
External Reference:
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html
Discussion:
This issue has been addressed in following products:
Supplementary for Red Hat Enterprise Linux 5
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2013:0963 https://rhn.redhat.com/errata/RHSA-2013-0963.html
---
This issue has been addressed in following products:
Supplementary for Red Hat Enterprise Linux 5
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2013:1060 https://rhn.redhat.com/errata/RHSA-2013-10
Bugzilla
CVE-2013-2464 Oracle JDK: unspecified vulnerability fixed in 7u25 (2D)
bugzilla·2013-06-19·CVSS 10.0
CVE-2013-2464 [CRITICAL] CVE-2013-2464 Oracle JDK: unspecified vulnerability fixed in 7u25 (2D)
CVE-2013-2464 Oracle JDK: unspecified vulnerability fixed in 7u25 (2D)
Oracle Java SE 7 Update 25 fixes an unspecified vulnerability in the 2D component (CVE-2013-2464). Upstream has CVSSv2 scored this issue as: 10.0/AV:N/AC:L/Au:N/C:C/I:C/A:C
External Reference:
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html
Discussion:
This issue has been addressed in following products:
Supplementary for Red Hat Enterprise Linux 5
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2013:0963 https://rhn.redhat.com/errata/RHSA-2013-0963.html
---
This issue has been addressed in following products:
Supplementary for Red Hat Enterprise Linux 5
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2013:1060 https://rhn.redhat.com/errata/RHSA-2013-1060.html
---
T
Bugzilla
CVE-2013-2437 Oracle JDK: unspecified vulnerability fixed in 7u25 (Deployment)
bugzilla·2013-06-19·CVSS 5.0
CVE-2013-2437 [MEDIUM] CVE-2013-2437 Oracle JDK: unspecified vulnerability fixed in 7u25 (Deployment)
CVE-2013-2437 Oracle JDK: unspecified vulnerability fixed in 7u25 (Deployment)
Oracle Java SE 7 Update 25 fixes an unspecified vulnerability in the Deployment component (CVE-2013-2437). Upstream has CVSSv2 scored this issue as: 5.0/AV:N/AC:L/Au:N/C:P/I:N/A:N
External Reference:
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html
Discussion:
This issue has been addressed in following products:
Supplementary for Red Hat Enterprise Linux 5
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2013:0963 https://rhn.redhat.com/errata/RHSA-2013-0963.html
---
This issue has been addressed in following products:
Supplementary for Red Hat Enterprise Linux 5
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2013:1060 https://rhn.redhat.com/errata/RHSA-2013-10
Bugzilla
CVE-2013-2468 Oracle JDK: unspecified vulnerability fixed in 7u25 (Deployment)
bugzilla·2013-06-19·CVSS 10.0
CVE-2013-2468 [CRITICAL] CVE-2013-2468 Oracle JDK: unspecified vulnerability fixed in 7u25 (Deployment)
CVE-2013-2468 Oracle JDK: unspecified vulnerability fixed in 7u25 (Deployment)
Oracle Java SE 7 Update 25 fixes an unspecified vulnerability in the Deployment component (CVE-2013-2468). Upstream has CVSSv2 scored this issue as: 10.0/AV:N/AC:L/Au:N/C:C/I:C/A:C
External Reference:
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html
Discussion:
This issue has been addressed in following products:
Supplementary for Red Hat Enterprise Linux 5
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2013:0963 https://rhn.redhat.com/errata/RHSA-2013-0963.html
---
This issue has been addressed in following products:
Supplementary for Red Hat Enterprise Linux 5
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2013:1060 https://rhn.redhat.com/errata/RHSA-2013-1
http://lists.apple.com/archives/security-announce/2013/Jan/msg00000.htmlhttp://lists.apple.com/archives/security-announce/2013/Mar/msg00002.htmlhttp://support.apple.com/kb/HT5642http://lists.apple.com/archives/security-announce/2013/Jan/msg00000.htmlhttp://lists.apple.com/archives/security-announce/2013/Mar/msg00002.htmlhttp://support.apple.com/kb/HT5642
2013-01-29
Published