The Qualcomm Innovation Center (QuIC) init scripts in Code Aurora Forum (CAF) releases of Android 4.1.x through 4.4.x allow local users to modify file metadata via a symlink attack on a file accessed by a (1) chown or (2) chmod command, as demonstrated by changing the permissions of an arbitrary file via an attack on the sensor-settings file.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2014-08-31 03:55
Updated : 2014-09-02 11:51
NVD link : CVE-2013-6124
Mitre link : CVE-2013-6124
JSON object : View
CWE
CWE-59
Improper Link Resolution Before File Access ('Link Following')
Products Affected
codeaurora
- android-msm