vendor:
N/A
by:
s0m3b0dy
7,8
CVSS
HIGH
Privilege Escalation
264
CWE
Product Name: N/A
Affected Version From: Unknown
Affected Version To: Unknown
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: LG L7 (PL)
Unknown
Android sensord 0day root exploit by s0m3b0dy
This exploit is used to gain root access on some Android devices that have the sensord deamon running as root process. The exploit sets the bit suid on /system/bin/mksh and links /data/misc/sensor/fifo_dat to a block device to make it rw. The exploit also disables auto-rotate to not overwrite the /system partition.
Mitigation:
Ensure that the sensord deamon is not running as root process and that the files are not links.
