PT-2014-3197 · Koush+2 · Koush Superuser+2
Published
2014-03-30
·
Updated
2014-04-03
·
CVE-2013-6770
CVSS v2.0
7.6
High
| Vector | AV:N/AC:H/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
CyanogenMod/ClockWorkMod/Koush Superuser package version 1.0.2.1
Description
The issue concerns the CyanogenMod/ClockWorkMod/Koush Superuser package, which does not properly restrict the set of users who can execute
/system/xbin/su with the --daemon option. This allows attackers to gain privileges by leveraging ADB shell access and a certain Linux UID, and then creating a Trojan horse script.Recommendations
For CyanogenMod/ClockWorkMod/Koush Superuser package version 1.0.2.1, consider restricting access to the
/system/xbin/su executable to minimize the risk of exploitation. As a temporary workaround, avoid using the --daemon option with the su command until a patch is available.Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Clockworkmod
Cyanogenmod
Koush Superuser