CVE-2013-4777 Information

Description

A certain configuration of Android 2.3.7 on the Motorola Defy XT phone for Republic Wireless uses init to create a /dev/socket/init_runit socket that listens for shell commands which allows local users to gain privileges by interacting with a LocalSocket object.

Reference

https://plus.google.com/110348415484169880343/posts/5ofgPNrSu3J

Share on: