NVD

Id
49023  
Name
CVE-2009-1754  
Description
The PackageManagerService class in services/java/com/android/server/PackageManagerService.java in Android 1.5 through 1.5 CRB42 does not properly check developer certificates during processing of sharedUserId requests at an application"s installation time, which allows remote user-assisted attackers to access application data by creating a package that specifies a shared user ID with an arbitrary application.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2009-05-26  
Modified Date
2012-02-29  
Seq
2009-1754  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
247903 49023 CVE-2009-1754 http://android.git.kernel.org/?p=platform/frameworks/base.git;a=commit;h=5d6d773fab559fdc12e553d60d789f3991ac552c  View
247904 49023 CVE-2009-1754 http://www.ocert.org/advisories/ocert-2009-006.html  View
247905 49023 CVE-2009-1754 [oss-security] 20090522 [oCERT-2009-006] Android improper package verification when using shared uids  View
247906 49023 CVE-2009-1754 20090522 [oCERT-2009-006] Android improper package verification when using shared uids  View
247907 49023 CVE-2009-1754 35090  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41629 JVNDB-2009-002636 Android の PackageManagerService クラスにおけるアプリケーションのデータにアクセスされる脆弱性 Android の services/java/com/android/server/PackageManagerService.java 内にある PackageManagerService クラスは、アプリケーションのインストレール時に、sharedUserId リクエスト処理を行う際、デベロッパーの証明書を適切にチェックしないため、アプリケーションのデータにアクセスされる脆弱性が存在します。 CVE-2009-1754 39185 CVE-2009-1754 49023 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002636.html 2009-05-26 2011-02-23 View