CVE-2013-6774

Exploit

EPSS 0.37%
Veröffentlicht 31.03.2014 14:58:57
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

Untrusted search path vulnerability in the ChainsDD Superuser package 3.1.3 for Android 4.2.x and earlier, CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android 4.2.x and earlier, and Chainfire SuperSU package before 1.69 for Android 4.2.x and earlier allows attackers to load an arbitrary .jar file and gain privileges via a crafted BOOTCLASSPATH environment variable for a /system/xbin/su process.  NOTE: another researcher was unable to reproduce this with ChainsDD Superuser.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Chainfire ≫ Supersu Version1.69 SwPlatformandroid

   Google ≫ Android Version1.0
   Google ≫ Android Version1.1
   Google ≫ Android Version1.5
   Google ≫ Android Version1.6
   Google ≫ Android Version2.0
   Google ≫ Android Version2.0.1
   Google ≫ Android Version2.1
   Google ≫ Android Version2.2
   Google ≫ Android Version2.2 Updaterev1
   Google ≫ Android Version2.2.1
   Google ≫ Android Version2.2.2
   Google ≫ Android Version2.2.3
   Google ≫ Android Version2.3
   Google ≫ Android Version2.3 Updaterev1
   Google ≫ Android Version2.3.1
   Google ≫ Android Version2.3.2
   Google ≫ Android Version2.3.3
   Google ≫ Android Version2.3.4
   Google ≫ Android Version2.3.5
   Google ≫ Android Version2.3.6
   Google ≫ Android Version2.3.7
   Google ≫ Android Version3.0
   Google ≫ Android Version3.1
   Google ≫ Android Version3.2
   Google ≫ Android Version3.2.1
   Google ≫ Android Version3.2.2
   Google ≫ Android Version3.2.4
   Google ≫ Android Version3.2.6
   Google ≫ Android Version4.0
   Google ≫ Android Version4.0.1
   Google ≫ Android Version4.0.2
   Google ≫ Android Version4.0.3
   Google ≫ Android Version4.0.4
   Google ≫ Android Version4.1
   Google ≫ Android Version4.1.2
   Google ≫ Android Version4.2
   Google ≫ Android Version4.2.1
   Google ≫ Android Version4.2.2

Androidsu ≫ Chainsdd Superuser Version3.1.3 SwPlatformandroid

Koushik Dutta ≫ Superuser Version1.0.2.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.37%	0.559

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

http://www.securityfocus.com/archive/1/529796

Exploit

http://www.securityfocus.com/archive/1/529822

https://nvd.nist.gov/vuln/detail/CVE-2013-6774

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-6774

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-6774

EUVD