NetSight
medium6.9

CVE-2013-4777

A certain configuration of Android 2.3.7 on the Motorola Defy XT phone for Republic Wireless uses init to create a /dev/socket/init_runit socket that listens f…

Impact

A certain configuration of Android 2.3.7 on the Motorola Defy XT phone for Republic Wireless uses init to create a /dev/socket/init_runit socket that listens for shell commands, which allows local users to gain privileges by interacting with a LocalSocket object.

Affected products

VendorProductAffected versions
GoogleAndroid
Version 2.3.7
MotorolaDefy Xt
All versions

Weakness classification

References