CVE-2013-4777

A certain configuration of Android 2.3.7 on the Motorola Defy XT phone for Republic Wireless uses init to create a /dev/socket/init_runit socket that listens for shell commands, which allows local users to gain privileges by interacting with a LocalSocket object.
References
Link Resource
https://plus.google.com/110348415484169880343/posts/5ofgPNrSu3J Exploit Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:google:android:2.3.7:*:*:*:*:*:*:*
cpe:2.3:h:motorola:defy_xt:-:-:-:*:-:-:-:republic_wireless

Information

Published : 2013-09-25 03:31

Updated : 2016-12-07 13:18


NVD link : CVE-2013-4777

Mitre link : CVE-2013-4777


JSON object : View

CWE
CWE-264

Permissions, Privileges, and Access Controls

Advertisement

dedicated server usa

Products Affected

google

  • android

motorola

  • defy_xt