CVE-2014-4372 — Link Following in Apple Iphone OS

CWE-59 — Link Following2 documents2 sources
Severity
3.6LOWNVD
EPSS
0.0%
top 88.74%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Apple Iphone OSApple Tvos
Timeline
PublishedSep 18
Latest updateMay 14

Description

syslogd in the syslog subsystem in Apple iOS before 8 and Apple TV before 7 allows local users to change the permissions of arbitrary files via a symlink attack on an unspecified file.

CVSS vector

AV:L/AC:L/C:N/I:P/A:PExploitability: 3.9 | Impact: 4.9

Affected Packages2 packages

▶NVDapple/tvos6.2+6
▶NVDapple/iphone_os7.1.2+9

🔴Vulnerability Details

1
GHSA
GHSA-3w8q-xg7c-33gv: syslogd in the syslog subsystem in Apple iOS before 8 and Apple TV before 7 allows local users to change the permissions of arbitrary files via a syml↗2022-05-14
▶