New passcode flaw discovered in Apple iPhone 4 and Apple iPhone 5 running iOS 6.1.3
Apple's release on Tuesday of iOS 6.1.3 was designed to put an end to that nasty passcode flaw that allowed an intruder to cancel a call from the lockscreen, toggle the power button, gain access to your dialer and much of your personal information. But now that iOS 6.1.3 is out, there are no worries, right? Uh, well, it seems that the Apple iPhone 4 and the Apple iPhone 5 (with Siri disabled) running on the new iOS build both have a glitch that allows strangers to access your photos and contacts.
The series of steps required includes making a Voice Dial command followed by the quick ejection of the SIM card on the phone. This opens the recent call history which gives access to the contacts list. While in the contacts list, adding a photo brings access to all pictures on the unit. A simple disabling of the Voice Dialer from the Passcode Lock menu will eliminate the security hazard although we're sure that Apple will send out a fix in iOS 6.1.4.
source: iPhoneblog.de (translated), MacRumors
Things that are NOT allowed: