A vulnerability, which was classified as problematic, was found in Apple iOS up to 8.4.1 (Smartphone Operating System). Affected is some unknown functionality of the component CFNetwork FTPProtocol. The manipulation with an unknown input leads to a code vulnerability. CWE is classifying the issue as CWE-17. This is going to have an impact on confidentiality. CVE summarizes:

The CFNetwork FTPProtocol component in Apple iOS before 9 allows remote FTP proxy servers to trigger TCP connection attempts to intranet hosts via crafted responses.

The weakness was disclosed 09/16/2015 by Amit Klein as HT205212 as confirmed advisory (Website). The advisory is shared for download at support.apple.com. This vulnerability is traded as CVE-2015-5912 since 08/06/2015. The exploitability is told to be difficult. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. There are neither technical details nor an exploit publicly available. The current price for an exploit might be approx. USD $0-$5k (estimation calculated on 06/15/2022). It is expected to see the exploit prices for this product increasing in the near future. The advisory points out:

An issue existed in the handling of proxy connect responses. This issue was addressed by removing the set-cookie header while parsing the connect response.

Upgrading to version 9 eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.

The vulnerability is also documented in the vulnerability database at Vulnerability Center (SBV-53104). The entries 9015, 68413, 77828 and 77762 are pretty similar.

Productinfo

Type

• Smartphone Operating System

Vendor

• Apple

Name

• iOS

License

• commercial

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion