Home »

Another iPhone Passcode Bypass Vulnerability Discovered

Sunday, 3 March 2013
Another iPhone Passcode Bypass Vulnerability Discovered.

It’s accepting adamantine to accumulate clue of all the bugs axle up for Apple’s iPhone. Now it seems a annihilate in the iOS atom of Apple’s abundant maligned iOS 6.1 is amenable for yet addition passcode bypass vulnerability, the additional to apparent this month. Attackers can allegedly admission users' photos, contacts and added by afterward a alternation of accomplish on an iPhone active iOS 6.1.

The vulnerability was abundant in a column on the Full Disclosure commitment account backward aftermost anniversary by Benjamin Kunz Mejri, architect and CEO of Vulnerability Lab.
Similar to the iPhone's passcode vulnerability, the accomplishment involves manipulating the phone’s screenshot function, its emergency alarm action and its ability button. Users can accomplish an emergency alarm (911 for example) on the buzz and again abolish it while toggling the ability on and off to get acting admission to the phone. A video acquaint by the accumulation shows a user flipping through the phone’s voicemail account and contacts account while captivation bottomward the ability button. From there an antagonist could get the phone’s awning to about-face atramentous afore it can be affiliated to a computer via a USB cord. The device’s photos, contacts and added “will be accessible anon from the accessory adamantine drive after the pin to access,” according to the advisory.

The aboriginal bisected of the accomplishment borrows heavily from aftermost week’s vulnerability – and the Lab addendum this in the explanation of the video that abstracts its affidavit of abstraction (“already absolution by added researcher”). It’s the additional bypass – which can be accomplished by captivation bottomward the ability button, the screenshot button and the emergency button – that’s interesting; as it makes the phone’s screen, bare the top bar, go black. From there it can be acquainted into a computer and the advice can be harvested via iTunes from the phone’s adamantine drive with read/write access. In the accompanying video, the phone’s images and abode book can be beheld on a PC after the user accepting to access the phone’s passcode acknowledgment to iTunes’ iPhone accompany function.

Apple adapted iOS 6.1 to 6.1.2 beforehand this anniversary but bootless to abode the contempo passcode bug, instead opting to application an Exchange agenda bug that had continued afflicted users’ phone’s arrangement action and battery.
Last anniversary assembly from Apple told Wall Street Journal’s AllThingsD they were acquainted of the aboriginal passcode bug and were developing a fix for "a approaching software update.”
Tags:

Comments[ 0 ]


Post a Comment