CVE-2013-6124

Published: Aug 31, 2014Modified: May 6, 2026

3.3

Vector

AV:L/AC:M/Au:N/C:N/I:P/A:P

Exploitability: 3.4 / Impact: 4.9

Source: NVD

Description

The Qualcomm Innovation Center (QuIC) init scripts in Code Aurora Forum (CAF) releases of Android 4.1.x through 4.4.x allow local users to modify file metadata via a symlink attack on a file accessed by a (1) chown or (2) chmod command, as demonstrated by changing the permissions of an arbitrary file via an attack on the sensor-settings file.

Affected (171)

Products: Codeaurora: Android Msm

Codeaurora

1 product

Android Msm

Configuration A

171 vulnerable

Vulnerable Software	Affected Versions
Codeaurora Android Msm	Version 3.10.22
Codeaurora Android Msm	Version 3.10.23
Codeaurora Android Msm	Version 3.10.24
Codeaurora Android Msm	Version 3.10.25
Codeaurora Android Msm	Version 3.10.26
Codeaurora Android Msm	Version 3.10.27
Codeaurora Android Msm	Version 3.10.28
Codeaurora Android Msm	Version 3.10.29
Codeaurora Android Msm	Version 3.10.30
Codeaurora Android Msm	Version 3.10.31
Codeaurora Android Msm	Version 3.10.32
Codeaurora Android Msm	Version 3.10.33
Codeaurora Android Msm	Version 3.10.35
Codeaurora Android Msm	Version 3.10.36
Codeaurora Android Msm	Version 3.10.37
Codeaurora Android Msm	Version 3.10.38
Codeaurora Android Msm	Version 3.10.39
Codeaurora Android Msm	Version 3.10.40
Codeaurora Android Msm	Version 3.10.41
Codeaurora Android Msm	Version 3.10.42
Codeaurora Android Msm	Version 3.10.43
Codeaurora Android Msm	Version 3.10.44
Codeaurora Android Msm	Version 3.10.45
Codeaurora Android Msm	Version 3.10.46
Codeaurora Android Msm	Version 3.10.47
Codeaurora Android Msm	Version 3.10.48
Codeaurora Android Msm	Version 3.10.49
Codeaurora Android Msm	Version 3.10.50
Codeaurora Android Msm	Version 3.10.51
Codeaurora Android Msm	Version 3.10.52
Codeaurora Android Msm	Version 3.10.53
Codeaurora Android Msm	Version 3.10
Codeaurora Android Msm	Version 3.12.10
Codeaurora Android Msm	Version 3.12.11
Codeaurora Android Msm	Version 3.12.12
Codeaurora Android Msm	Version 3.12.13
Codeaurora Android Msm	Version 3.12.14
Codeaurora Android Msm	Version 3.12.15
Codeaurora Android Msm	Version 3.12.16
Codeaurora Android Msm	Version 3.12.17
Codeaurora Android Msm	Version 3.12.18
Codeaurora Android Msm	Version 3.12.19
Codeaurora Android Msm	Version 3.12.20
Codeaurora Android Msm	Version 3.12.21
Codeaurora Android Msm	Version 3.12.22
Codeaurora Android Msm	Version 3.12.23
Codeaurora Android Msm	Version 3.12.24
Codeaurora Android Msm	Version 3.12.25
Codeaurora Android Msm	Version 3.12.26
Codeaurora Android Msm	Version 3.12.3
Codeaurora Android Msm	Version 3.12.4
Codeaurora Android Msm	Version 3.12.5
Codeaurora Android Msm	Version 3.12.6
Codeaurora Android Msm	Version 3.12.7
Codeaurora Android Msm	Version 3.12.8
Codeaurora Android Msm	Version 3.12.9
Codeaurora Android Msm	Version 3.13.10
Codeaurora Android Msm	Version 3.13.11
Codeaurora Android Msm	Version 3.13.1
Codeaurora Android Msm	Version 3.13.2
Codeaurora Android Msm	Version 3.13.3
Codeaurora Android Msm	Version 3.13.4
Codeaurora Android Msm	Version 3.13.5
Codeaurora Android Msm	Version 3.13.6
Codeaurora Android Msm	Version 3.13.7
Codeaurora Android Msm	Version 3.13.8
Codeaurora Android Msm	Version 3.13.9
Codeaurora Android Msm	Version 3.13
Codeaurora Android Msm	Version 3.13 rc1
Codeaurora Android Msm	Version 3.13 rc2
Codeaurora Android Msm	Version 3.13 rc3
Codeaurora Android Msm	Version 3.13 rc4
Codeaurora Android Msm	Version 3.13 rc5
Codeaurora Android Msm	Version 3.13 rc6
Codeaurora Android Msm	Version 3.13 rc7
Codeaurora Android Msm	Version 3.13 rc8
Codeaurora Android Msm	Version 3.14.10
Codeaurora Android Msm	Version 3.14.11
Codeaurora Android Msm	Version 3.14.12
Codeaurora Android Msm	Version 3.14.13
Codeaurora Android Msm	Version 3.14.14
Codeaurora Android Msm	Version 3.14.15
Codeaurora Android Msm	Version 3.14.16
Codeaurora Android Msm	Version 3.14.1
Codeaurora Android Msm	Version 3.14.2
Codeaurora Android Msm	Version 3.14.3
Codeaurora Android Msm	Version 3.14.4
Codeaurora Android Msm	Version 3.14.5
Codeaurora Android Msm	Version 3.14.6
Codeaurora Android Msm	Version 3.14.7
Codeaurora Android Msm	Version 3.14.8
Codeaurora Android Msm	Version 3.14.9
Codeaurora Android Msm	Version 3.14
Codeaurora Android Msm	Version 3.14 rc1
Codeaurora Android Msm	Version 3.14 rc2
Codeaurora Android Msm	Version 3.14 rc3
Codeaurora Android Msm	Version 3.14 rc4
Codeaurora Android Msm	Version 3.14 rc5
Codeaurora Android Msm	Version 3.14 rc6
Codeaurora Android Msm	Version 3.14 rc7
Codeaurora Android Msm	Version 3.14 rc8
Codeaurora Android Msm	Version 3.15.10
Codeaurora Android Msm	Version 3.15.1
Codeaurora Android Msm	Version 3.15.2
Codeaurora Android Msm	Version 3.15.3
Codeaurora Android Msm	Version 3.15.4
Codeaurora Android Msm	Version 3.15.5
Codeaurora Android Msm	Version 3.15.6
Codeaurora Android Msm	Version 3.15.7
Codeaurora Android Msm	Version 3.15.8
Codeaurora Android Msm	Version 3.15.9
Codeaurora Android Msm	Version 3.15
Codeaurora Android Msm	Version 3.15 rc1
Codeaurora Android Msm	Version 3.15 rc2
Codeaurora Android Msm	Version 3.15 rc3
Codeaurora Android Msm	Version 3.15 rc4
Codeaurora Android Msm	Version 3.15 rc5
Codeaurora Android Msm	Version 3.15 rc6
Codeaurora Android Msm	Version 3.15 rc7
Codeaurora Android Msm	Version 3.15 rc8
Codeaurora Android Msm	Version 3.16.1
Codeaurora Android Msm	Version 3.16
Codeaurora Android Msm	Version 3.16 rc1
Codeaurora Android Msm	Version 3.16 rc2
Codeaurora Android Msm	Version 3.16 rc3
Codeaurora Android Msm	Version 3.16 rc4
Codeaurora Android Msm	Version 3.16 rc5
Codeaurora Android Msm	Version 3.16 rc6
Codeaurora Android Msm	Version 3.16 rc7
Codeaurora Android Msm	Version 3.17 rc1
Codeaurora Android Msm	Version 3.2.54
Codeaurora Android Msm	Version 3.2.55
Codeaurora Android Msm	Version 3.2.56
Codeaurora Android Msm	Version 3.2.57
Codeaurora Android Msm	Version 3.2.58
Codeaurora Android Msm	Version 3.2.59
Codeaurora Android Msm	Version 3.2.60
Codeaurora Android Msm	Version 3.2.61
Codeaurora Android Msm	Version 3.2.62
Codeaurora Android Msm	Version 3.4.100
Codeaurora Android Msm	Version 3.4.101
Codeaurora Android Msm	Version 3.4.102
Codeaurora Android Msm	Version 3.4.103
Codeaurora Android Msm	Version 3.4.72
Codeaurora Android Msm	Version 3.4.73
Codeaurora Android Msm	Version 3.4.74
Codeaurora Android Msm	Version 3.4.75
Codeaurora Android Msm	Version 3.4.76
Codeaurora Android Msm	Version 3.4.77
Codeaurora Android Msm	Version 3.4.78
Codeaurora Android Msm	Version 3.4.79
Codeaurora Android Msm	Version 3.4.80
Codeaurora Android Msm	Version 3.4.81
Codeaurora Android Msm	Version 3.4.82
Codeaurora Android Msm	Version 3.4.83
Codeaurora Android Msm	Version 3.4.84
Codeaurora Android Msm	Version 3.4.85
Codeaurora Android Msm	Version 3.4.86
Codeaurora Android Msm	Version 3.4.87
Codeaurora Android Msm	Version 3.4.88
Codeaurora Android Msm	Version 3.4.89
Codeaurora Android Msm	Version 3.4.90
Codeaurora Android Msm	Version 3.4.91
Codeaurora Android Msm	Version 3.4.92
Codeaurora Android Msm	Version 3.4.93
Codeaurora Android Msm	Version 3.4.94
Codeaurora Android Msm	Version 3.4.95
Codeaurora Android Msm	Version 3.4.96
Codeaurora Android Msm	Version 3.4.97
Codeaurora Android Msm	Version 3.4.98
Codeaurora Android Msm	Version 3.4.99

Related CWEs

CWE-59

Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

References (2)

https://www.codeaurora.org/projects/security-advisories/insecure-owner-permission-changes-init-shell-scripts-cve-2013-6124

Source: cve@mitre.org

Vendor Advisory

https://www.codeaurora.org/projects/security-advisories/insecure-owner-permission-changes-init-shell-scripts-cve-2013-6124

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.