A certain configuration of Android 2.3.7 on the Motorola Defy XT phone for Republic Wireless uses init to create a /dev/socket/init_runit socket that listens for shell commands, which allows local users to gain privileges by interacting with a LocalSocket object.
References
Link | Resource |
---|---|
https://plus.google.com/110348415484169880343/posts/5ofgPNrSu3J | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2013-09-25 03:31
Updated : 2016-12-07 13:18
NVD link : CVE-2013-4777
Mitre link : CVE-2013-4777
JSON object : View
CWE
CWE-264
Permissions, Privileges, and Access Controls
Products Affected
- android
motorola
- defy_xt