NVD

Id
41667  
Name
CVE-2013-6774  
Description
Untrusted search path vulnerability in the ChainsDD Superuser package 3.1.3 for Android 4.2.x and earlier, CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android 4.2.x and earlier, and Chainfire SuperSU package before 1.69 for Android 4.2.x and earlier allows attackers to load an arbitrary .jar file and gain privileges via a crafted BOOTCLASSPATH environment variable for a /system/xbin/su process. NOTE: another researcher was unable to reproduce this with ChainsDD Superuser.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2014-03-31  
Modified Date
2015-11-10  
Seq
2013-6774  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
210738 41667 CVE-2013-6774 20131113 Superuser unsanitized environment vulnerability on Android <= 4.2.x  View
210739 41667 CVE-2013-6774 20131114 Re: Superuser unsanitized environment vulnerability on Android <= 4.2.x  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24697 JVNDB-2013-006272 Android 用 ChainsDD Superuser パッケージなどの製品における任意の .jar ファイルをロードされる脆弱性 Android 用 ChainsDD Superuser パッケージ、CyanogenMod/ClockWorkMod/Koush Superuser パッケージ、および Chainfire SuperSU パッケージには、任意の .jar ファイルをロードされる、および権限を取得される脆弱性が存在します。 CVE-2013-6774 66716 CVE-2013-6774 41667 10 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006272.html 2013-11-13 2014-04-02 View