CVE-2013-6769: Input Validation
Published Mar 30, 2014
·Updated
The CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android allows attackers to gain privileges via shell metacharacters in the -c option to /system/xbin/su.
Affected Software
4 affected components
Koushik Dutta Superuser=1.0.2.1
Google Android
All of the following
Koushik Dutta Superuser=1.0.2.1
Google Android
Event History
Mar 30, 2014
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Mar 31, 2014
Data Sourced
via NVD·02:58 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-6769?
CVE-2013-6769 is rated as a high-severity vulnerability due to the potential for privilege escalation on affected devices.
2
How do I fix CVE-2013-6769?
To fix CVE-2013-6769, it is recommended to update the CyanogenMod/ClockWorkMod/Koush Superuser package to a version later than 1.0.2.1.
3
Which versions of Koushik Dutta Superuser are affected by CVE-2013-6769?
CVE-2013-6769 specifically affects Koushik Dutta Superuser version 1.0.2.1.
4
Can CVE-2013-6769 be exploited remotely?
CVE-2013-6769 requires local access to the device, making remote exploitation unlikely.
5
What are the potential impacts of CVE-2013-6769?
Exploitation of CVE-2013-6769 can allow attackers to gain root privileges, potentially leading to unauthorized access and control over the device.