CVE-2013-5133
Backup in Apple iOS before 7.1 does not properly restrict symlinks, which allows remote attackers...
Backup in Apple iOS before 7.1 does not properly restrict symlinks, which allows remote attackers to overwrite files during a restore operation via crafted backup data.
Exploit likelihood
What each source reports
NVD Score used
Backup in Apple iOS before 7.1 does not properly restrict symlinks, which allows remote attackers to overwrite files during a restore operation via crafted backup data.
- Record
CVE-2013-5133- CVSS 2.0
- 8.8 High
AV:N/AC:M/Au:N/C:N/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Backup in Apple iOS before 7.1 does not properly restrict symlinks, which allows remote attackers to overwrite files during a restore operation via crafted backup data.
- Record
CVE-2013-5133- Updated
- 2026-11-02
EUVDEUVD-2013-4973 No score
Backup in Apple iOS before 7.1 does not properly restrict symlinks, which allows remote attackers to overwrite files during a restore operation via crafted backup data.
- Record
EUVD-2013-4973- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6hmq-v65x-pjjh No score
Backup in Apple iOS before 7.1 does not properly restrict symlinks, which allows remote attackers...
Backup in Apple iOS before 7.1 does not properly restrict symlinks, which allows remote attackers to overwrite files during a restore operation via crafted backup data.
- Record
GHSA-6hmq-v65x-pjjh- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-5133 is a high vulnerability (CVSS 8.8) in Apple Iphone Os, published March 14, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.74%, the 77th percentile. No source names a fixed version.