Open Handset Alliance Android Local Privilege Escalation and Security Bypass Vulnerabilities
BID:49709
Info
Open Handset Alliance Android Local Privilege Escalation and Security Bypass Vulnerabilities
| Bugtraq ID: | 49709 |
| Class: | Unknown |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Sep 20 2011 12:00AM |
| Updated: | Sep 20 2011 12:00AM |
| Credit: | Jon Oberheide and Jon Oberheide |
| Vulnerable: |
Open Handset Alliance Android 2.3.5 Open Handset Alliance Android 2.3.2 Open Handset Alliance Android 2.3.1 Open Handset Alliance Android 3.5 Open Handset Alliance Android 3.2 Open Handset Alliance Android 3.1 Open Handset Alliance Android 3.0 Open Handset Alliance Android 2.3.4 Open Handset Alliance Android 2.3 Open Handset Alliance Android 2.2 Open Handset Alliance Android 2.1 Open Handset Alliance Android 1.5 Open Handset Alliance Android 1.0 |
| Not Vulnerable: | |
Discussion
Open Handset Alliance Android Local Privilege Escalation and Security Bypass Vulnerabilities
Open Handset Alliance Android is prone to local privilege-escalation and security-bypass vulnerabilities.
A local attacker can exploit the security-bypass issue to install arbitrary applications on the device, without sufficient privileges.
A local attacker can also exploit the privilege-escalation issue to elevate privileges, leading to a complete compromise of the device.
Open Handset Alliance Android is prone to local privilege-escalation and security-bypass vulnerabilities.
A local attacker can exploit the security-bypass issue to install arbitrary applications on the device, without sufficient privileges.
A local attacker can also exploit the privilege-escalation issue to elevate privileges, leading to a complete compromise of the device.
Exploit / POC
Open Handset Alliance Android Local Privilege Escalation and Security Bypass Vulnerabilities
A video demonstrating the exploit is available. Please see the references for information.
A video demonstrating the exploit is available. Please see the references for information.
Solution / Fix
Open Handset Alliance Android Local Privilege Escalation and Security Bypass Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Open Handset Alliance Android Local Privilege Escalation and Security Bypass Vulnerabilities
References:
References:
- Android Homepage (Open Handset Alliance)
- Android vulnerabilities and SOURCE Barcelona (Duo Security)