CVEs-PoC/2013/CVE-2013-4777.md

CVE-2013-4777

Description

A certain configuration of Android 2.3.7 on the Motorola Defy XT phone for Republic Wireless uses init to create a /dev/socket/init_runit socket that listens for shell commands, which allows local users to gain privileges by interacting with a LocalSocket object.

POC

Reference

• https://plus.google.com/110348415484169880343/posts/5ofgPNrSu3J
• https://plus.google.com/110348415484169880343/posts/5ofgPNrSu3J

Github

No PoCs found on GitHub currently.