CVE-2013-4777

A certain configuration of Android 2.3.7 on the Motorola Defy XT phone for Republic Wireless uses init to create a /dev/socket/init_runit socket that listens for shell commands, which allows local users to gain privileges by interacting with a LocalSocket object.

CVSS v2.0

6.9 MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.21% chance of exploitation in the next 30 days, 11th percentile

Published

2013-09-25

Updated

2024-09-17

Proof-of-concept exploits (1)

• https://plus.google.com/110348415484169880343/posts/5ofgPNrSu3J

References

• CVE Record
• NVD entry

Related

• CVE-2013-4776
• CVE-2013-4782
• CVE-2013-4775
• CVE-2013-4786
• CVE-2013-4759
• CVE-2013-4787