Apple iOS 6.1.3 lock screen Security Bypass Vulnerability

Release date: 2013-03-20
Updated on: 2013-03-22

Affected Systems:
Apple iOS 6.1.3
Description:
--------------------------------------------------------------------------------
Bugtraq id: 58633
 
Apple iOS is a handheld device operating system developed by Apple.

Apple iOS 6.1.3 and other versions allow unauthenticated users to bypass the password-protected iPhone, iPad, and iPod touch on the screen lock. This vulnerability can be exploited by dialing through the voice control function. If a SIM card pops up during the dialing process, the device terminates the call and allows unauthorized access to the address book and photos.
 
<* Source: videosdebarraquito

Link: http://bgr.com/2013/03/20/apple-ios-vulnerability-passcode-bypass-387998/
Http://nakedsecurity.sophos.com/2013/03/21/ios-6-1-3-passcode-lock-bypass/
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
Apple
-----
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:
 
Http://support.apple.com/