Open Handset Alliance Android Screen Lock Security Bypass Vulnerability
BID:37723
Info
Open Handset Alliance Android Screen Lock Security Bypass Vulnerability
| Bugtraq ID: | 37723 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Jan 12 2010 12:00AM |
| Updated: | Apr 05 2010 10:52PM |
| Credit: | The Assurer |
| Vulnerable: |
Open Handset Alliance Android 2.0.1 Open Handset Alliance Android 0 Motorola Droid 0 |
| Not Vulnerable: | |
Discussion
Open Handset Alliance Android Screen Lock Security Bypass Vulnerability
Android from Open Handset Alliance is prone to a security-bypass vulnerability because the screen lock may be bypassed.
Successful exploits can allow an attacker with physical access to a vulnerable phone to perform unauthorized actions or obtain sensitive information.
Android 2.0.1 running on the Motorola Droid phone is vulnerable.
Android from Open Handset Alliance is prone to a security-bypass vulnerability because the screen lock may be bypassed.
Successful exploits can allow an attacker with physical access to a vulnerable phone to perform unauthorized actions or obtain sensitive information.
Android 2.0.1 running on the Motorola Droid phone is vulnerable.
Exploit / POC
Open Handset Alliance Android Screen Lock Security Bypass Vulnerability
Attackers require physical access to an affected phone to exploit this issue.
Attackers require physical access to an affected phone to exploit this issue.
Solution / Fix
Open Handset Alliance Android Screen Lock Security Bypass Vulnerability
Solution:
Update is available to address this issue. Please see the references for more information.
Solution:
Update is available to address this issue. Please see the references for more information.
References
Open Handset Alliance Android Screen Lock Security Bypass Vulnerability
References:
References:
- Android Homepage (Open Handset Alliance)
- Verizon Droid pattern lock bypass (The Assurer)