Lucene search
MitreCVE-2013-6775HistoryMar 31, 2014 - 2:58 p.m.
CVE-2013-6775
2014-03-3114:58:57
CWE-264
mitre
web.nvd.nist.gov
21
cve-2013-6775
chainfire
supersu
android
privilege escalation
shell metacharacters
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.9
Confidence
Low
EPSS
0.004
Percentile
75.1%
The Chainfire SuperSU package before 1.69 for Android allows attackers to gain privileges via the (1) backtick or (2) $() type of shell metacharacters in the -c option to /system/xbin/su.
Affected configurations
Node
chainfiresupersuMatch1.69android
googleandroidMatch1.0
ORgoogleandroidMatch1.1
ORgoogleandroidMatch1.5
ORgoogleandroidMatch1.6
ORgoogleandroidMatch2.0
ORgoogleandroidMatch2.0.1
ORgoogleandroidMatch2.1
ORgoogleandroidMatch2.2
ORgoogleandroidMatch2.2rev1
ORgoogleandroidMatch2.2.1
ORgoogleandroidMatch2.2.2
ORgoogleandroidMatch2.2.3
ORgoogleandroidMatch2.3
ORgoogleandroidMatch2.3rev1
ORgoogleandroidMatch2.3.1
ORgoogleandroidMatch2.3.2
ORgoogleandroidMatch2.3.3
ORgoogleandroidMatch2.3.4
ORgoogleandroidMatch2.3.5
ORgoogleandroidMatch2.3.6
ORgoogleandroidMatch2.3.7
ORgoogleandroidMatch3.0
ORgoogleandroidMatch3.1
ORgoogleandroidMatch3.2
ORgoogleandroidMatch3.2.1
ORgoogleandroidMatch3.2.2
ORgoogleandroidMatch3.2.4
ORgoogleandroidMatch3.2.6
ORgoogleandroidMatch4.0
ORgoogleandroidMatch4.0.1
ORgoogleandroidMatch4.0.2
ORgoogleandroidMatch4.0.3
ORgoogleandroidMatch4.0.4
ORgoogleandroidMatch4.1
ORgoogleandroidMatch4.1.2
ORgoogleandroidMatch4.2
ORgoogleandroidMatch4.2.1
ORgoogleandroidMatch4.2.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| chainfire | supersu | 1.69 | cpe:2.3:a:chainfire:supersu:1.69:*:*:*:*:android:*:* |
| android | 1.0 | cpe:2.3:o:google:android:1.0:*:*:*:*:*:*:* | |
| android | 1.1 | cpe:2.3:o:google:android:1.1:*:*:*:*:*:*:* | |
| android | 1.5 | cpe:2.3:o:google:android:1.5:*:*:*:*:*:*:* | |
| android | 1.6 | cpe:2.3:o:google:android:1.6:*:*:*:*:*:*:* | |
| android | 2.0 | cpe:2.3:o:google:android:2.0:*:*:*:*:*:*:* | |
| android | 2.0.1 | cpe:2.3:o:google:android:2.0.1:*:*:*:*:*:*:* | |
| android | 2.1 | cpe:2.3:o:google:android:2.1:*:*:*:*:*:*:* | |
| android | 2.2 | cpe:2.3:o:google:android:2.2:*:*:*:*:*:*:* | |
| android | 2.2 | cpe:2.3:o:google:android:2.2:rev1:*:*:*:*:*:* |
References
Related
prion
prion
Code injection
2014-03-31 14:58:00
cvelist
cvelist
CVE-2013-6775
2014-03-30 10:00:00
nvd
nvd
CVE-2013-6775
2014-03-31 14:58:57
packetstorm
packetstorm
Android 4.2.x Superuser Shell Character Escape
2013-11-14 00:00:00
securityvulns
securityvulns
Android Superuser shell character escape vulnerability
2013-11-18 00:00:00
Android su applications privilege escalation
2013-11-18 00:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.9
Confidence
Low
EPSS
0.004
Percentile
75.1%
Related for CVE-2013-6775