Lucene search
PRIOn knowledge basePRION:CVE-2013-6770HistoryMar 31, 2014 - 2:58 p.m.
Code injection
2014-03-3114:58:00
PRIOn knowledge base
www.prio-n.com
3
The CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android 4.3 and 4.4 does not properly restrict the set of users who can execute /system/xbin/su with the --daemon option, which allows attackers to gain privileges by leveraging ADB shell access and a certain Linux UID, and then creating a Trojan horse script.
References
Related
cve
cve
CVE-2013-6770
2014-03-31 14:58:57
securityvulns
securityvulns
Superuser "su --daemon" vulnerability on Android >= 4.3
2013-11-18 00:00:00
Android su applications privilege escalation
2013-11-18 00:00:00
packetstorm
packetstorm
Android 4.3 Superuser Root Privilege Escalation
2013-11-14 00:00:00
cvelist
cvelist
CVE-2013-6770
2014-03-30 10:00:00
nvd
nvd
CVE-2013-6770
2014-03-31 14:58:57