The Qualcomm Innovation Center (QuIC) init scripts in Code Aurora Forum (CAF) releases of Android 4.1.x through 4.4.x allow local users to modify file metadata via a symlink attack on a file accessed by a (1) chown or (2) chmod command, as demonstrated by changing the permissions of an arbitrary file via an attack on the sensor-settings file.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2014-08-31 10:55
Updated : 2024-02-28 12:20
NVD link : CVE-2013-6124
Mitre link : CVE-2013-6124
CVE.ORG link : CVE-2013-6124
JSON object : View
Products Affected
codeaurora
- android-msm
CWE
CWE-59
Improper Link Resolution Before File Access ('Link Following')