CVE-2013-6769

High

Published: 31/03/2014(UTC)Translated: 17/06/2026(UTC)NVD NIST

Summary

The Superuser package 1.0.2.1 for Android in CyanogenMod/ClockWorkMod/Koush allows attackers to gain privileges via shell metacharacters in the -c option to /system/xbin/su.

Risk Assessment

Attackers can exploit this vulnerability to gain unauthorized access to the system, potentially leading to serious security breaches.

Recommendation

It is recommended to update the Superuser package to the latest version to mitigate the risks associated with this vulnerability.

Other vulnerabilities in CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1

CVE-2013-6770High
The CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android 4.3 and 4.4 does not properly restrict the set of users who can execute /system/xbin/su with the --daemon option. This allows attackers to gain privileges by leveraging ADB shell access and a certain Linux UID, and then creating a Trojan horse script.

Original NVD description (English source)

The CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android allows attackers to gain privileges via shell metacharacters in the -c option to /system/xbin/su.