Open Handset Alliance System Property Space Security Bypass Vulnerability

Bugtraq ID:	47562
Class:	Design Error
CVE:	CVE-2011-1149
Remote:	No
Local:	Yes
Published:	Apr 25 2011 12:00AM
Updated:	Apr 25 2011 12:00AM
Credit:	Scott Walker
Vulnerable:	Open Handset Alliance Android 2.3.2 Open Handset Alliance Android 2.3.1 Open Handset Alliance Android 2.0.1 Open Handset Alliance Android 2.3 Open Handset Alliance Android 2.2 Open Handset Alliance Android 2.1 Open Handset Alliance Android 1.5 CRCxx Open Handset Alliance Android 1.5 CRBxx Open Handset Alliance Android 1.5 CRB-43 Open Handset Alliance Android 1.5 CRB-42 Open Handset Alliance Android 1.5 COCxx Open Handset Alliance Android 1.5 CBDxx Open Handset Alliance Android 1.5 Open Handset Alliance Android 1.0 Open Handset Alliance Android 0
Not Vulnerable:

Open Handset Alliance System Property Space Security Bypass Vulnerability

Open Handset Alliance Android is prone to a security-bypass vulnerability.

A local attacker can exploit this issue to bypass the sandbox security mechanism and gain elevated privileges on the affected device.

Open Handset Alliance System Property Space Security Bypass Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Open Handset Alliance System Property Space Security Bypass Vulnerability

Solution:
The vendor released an update. Please see the references for details.

Open Handset Alliance System Property Space Security Bypass Vulnerability

References:

• Android Homepage (Google)
  
• use tmpfs/ftruncate for properties backing store instead of ashmem (Brian Swetland)
  
• various modules to aide in 'rooting' the tmobile g2 (htc vision) (Scott Walker )