CVE-2013-6768
Android 4.2.x Superuser Unsanitized Environment
Severity Score
7.8
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
2
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Untrusted search path vulnerability in the CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android 4.2.x and earlier allows attackers to trigger the launch of a Trojan horse app_process program via a crafted PATH environment variable for a /system/xbin/su process.
Vulnerabilidad de búsqueda de ruta no confiable en el paquete CyanogenMod/ClockWorkMod/Koush Superuser 1.0.2.1 para Android 4.2.x y anteriores permite a atacantes provocar el lanzamiento de un programa app_process caballo de troya a través de una variable de entorno PATH manipulada para un proceso /system/xbin/su.
Vulnerable releases of several common Android Superuser packages may allow malicious Android applications to execute arbitrary commands as root without notifying the device owner. This advisoriy documents PATH and BOOTCLASSPATH vulnerabilities.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2013-11-10 CVE Reserved
- 2013-11-14 CVE Published
- 2013-11-14 First Exploit
- 2024-08-06 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CAPEC
References (2)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|---|---|
| https://packetstorm.news/files/id/124015 | 2013-11-14 | |
| http://www.securityfocus.com/archive/1/529796 | 2024-08-06 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Koushik Dutta Search vendor "Koushik Dutta" | Superuser Search vendor "Koushik Dutta" for product "Superuser" | 1.0.2.1 Search vendor "Koushik Dutta" for product "Superuser" and version "1.0.2.1" | - |
Affected
| in | Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 1.0 Search vendor "Google" for product "Android" and version "1.0" | - |
Safe
|
| Koushik Dutta Search vendor "Koushik Dutta" | Superuser Search vendor "Koushik Dutta" for product "Superuser" | 1.0.2.1 Search vendor "Koushik Dutta" for product "Superuser" and version "1.0.2.1" | - |
Affected
| in | Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 1.1 Search vendor "Google" for product "Android" and version "1.1" | - |
Safe
|
| Koushik Dutta Search vendor "Koushik Dutta" | Superuser Search vendor "Koushik Dutta" for product "Superuser" | 1.0.2.1 Search vendor "Koushik Dutta" for product "Superuser" and version "1.0.2.1" | - |
Affected
| in | Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 1.5 Search vendor "Google" for product "Android" and version "1.5" | - |
Safe
|
| Koushik Dutta Search vendor "Koushik Dutta" | Superuser Search vendor "Koushik Dutta" for product "Superuser" | 1.0.2.1 Search vendor "Koushik Dutta" for product "Superuser" and version "1.0.2.1" | - |
Affected
| in | Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 1.6 Search vendor "Google" for product "Android" and version "1.6" | - |
Safe
|
| Koushik Dutta Search vendor "Koushik Dutta" | Superuser Search vendor "Koushik Dutta" for product "Superuser" | 1.0.2.1 Search vendor "Koushik Dutta" for product "Superuser" and version "1.0.2.1" | - |
Affected
| in | Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 2.0 Search vendor "Google" for product "Android" and version "2.0" | - |
Safe
|
| Koushik Dutta Search vendor "Koushik Dutta" | Superuser Search vendor "Koushik Dutta" for product "Superuser" | 1.0.2.1 Search vendor "Koushik Dutta" for product "Superuser" and version "1.0.2.1" | - |
Affected
| in | Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 2.0.1 Search vendor "Google" for product "Android" and version "2.0.1" | - |
Safe
|
| Koushik Dutta Search vendor "Koushik Dutta" | Superuser Search vendor "Koushik Dutta" for product "Superuser" | 1.0.2.1 Search vendor "Koushik Dutta" for product "Superuser" and version "1.0.2.1" | - |
Affected
| in | Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 2.1 Search vendor "Google" for product "Android" and version "2.1" | - |
Safe
|
| Koushik Dutta Search vendor "Koushik Dutta" | Superuser Search vendor "Koushik Dutta" for product "Superuser" | 1.0.2.1 Search vendor "Koushik Dutta" for product "Superuser" and version "1.0.2.1" | - |
Affected
| in | Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 2.2 Search vendor "Google" for product "Android" and version "2.2" | - |
Safe
|
| Koushik Dutta Search vendor "Koushik Dutta" | Superuser Search vendor "Koushik Dutta" for product "Superuser" | 1.0.2.1 Search vendor "Koushik Dutta" for product "Superuser" and version "1.0.2.1" | - |
Affected
| in | Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 2.2 Search vendor "Google" for product "Android" and version "2.2" | rev1 |
Safe
|
| Koushik Dutta Search vendor "Koushik Dutta" | Superuser Search vendor "Koushik Dutta" for product "Superuser" | 1.0.2.1 Search vendor "Koushik Dutta" for product "Superuser" and version "1.0.2.1" | - |
Affected
| in | Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 2.2.1 Search vendor "Google" for product "Android" and version "2.2.1" | - |
Safe
|
| Koushik Dutta Search vendor "Koushik Dutta" | Superuser Search vendor "Koushik Dutta" for product "Superuser" | 1.0.2.1 Search vendor "Koushik Dutta" for product "Superuser" and version "1.0.2.1" | - |
Affected
| in | Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 2.2.2 Search vendor "Google" for product "Android" and version "2.2.2" | - |
Safe
|
| Koushik Dutta Search vendor "Koushik Dutta" | Superuser Search vendor "Koushik Dutta" for product "Superuser" | 1.0.2.1 Search vendor "Koushik Dutta" for product "Superuser" and version "1.0.2.1" | - |
Affected
| in | Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 2.2.3 Search vendor "Google" for product "Android" and version "2.2.3" | - |
Safe
|
| Koushik Dutta Search vendor "Koushik Dutta" | Superuser Search vendor "Koushik Dutta" for product "Superuser" | 1.0.2.1 Search vendor "Koushik Dutta" for product "Superuser" and version "1.0.2.1" | - |
Affected
| in | Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 2.3 Search vendor "Google" for product "Android" and version "2.3" | - |
Safe
|
| Koushik Dutta Search vendor "Koushik Dutta" | Superuser Search vendor "Koushik Dutta" for product "Superuser" | 1.0.2.1 Search vendor "Koushik Dutta" for product "Superuser" and version "1.0.2.1" | - |
Affected
| in | Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 2.3 Search vendor "Google" for product "Android" and version "2.3" | rev1 |
Safe
|
| Koushik Dutta Search vendor "Koushik Dutta" | Superuser Search vendor "Koushik Dutta" for product "Superuser" | 1.0.2.1 Search vendor "Koushik Dutta" for product "Superuser" and version "1.0.2.1" | - |
Affected
| in | Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 2.3.1 Search vendor "Google" for product "Android" and version "2.3.1" | - |
Safe
|
| Koushik Dutta Search vendor "Koushik Dutta" | Superuser Search vendor "Koushik Dutta" for product "Superuser" | 1.0.2.1 Search vendor "Koushik Dutta" for product "Superuser" and version "1.0.2.1" | - |
Affected
| in | Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 2.3.2 Search vendor "Google" for product "Android" and version "2.3.2" | - |
Safe
|
| Koushik Dutta Search vendor "Koushik Dutta" | Superuser Search vendor "Koushik Dutta" for product "Superuser" | 1.0.2.1 Search vendor "Koushik Dutta" for product "Superuser" and version "1.0.2.1" | - |
Affected
| in | Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 2.3.3 Search vendor "Google" for product "Android" and version "2.3.3" | - |
Safe
|
| Koushik Dutta Search vendor "Koushik Dutta" | Superuser Search vendor "Koushik Dutta" for product "Superuser" | 1.0.2.1 Search vendor "Koushik Dutta" for product "Superuser" and version "1.0.2.1" | - |
Affected
| in | Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 2.3.4 Search vendor "Google" for product "Android" and version "2.3.4" | - |
Safe
|
| Koushik Dutta Search vendor "Koushik Dutta" | Superuser Search vendor "Koushik Dutta" for product "Superuser" | 1.0.2.1 Search vendor "Koushik Dutta" for product "Superuser" and version "1.0.2.1" | - |
Affected
| in | Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 2.3.5 Search vendor "Google" for product "Android" and version "2.3.5" | - |
Safe
|
| Koushik Dutta Search vendor "Koushik Dutta" | Superuser Search vendor "Koushik Dutta" for product "Superuser" | 1.0.2.1 Search vendor "Koushik Dutta" for product "Superuser" and version "1.0.2.1" | - |
Affected
| in | Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 2.3.6 Search vendor "Google" for product "Android" and version "2.3.6" | - |
Safe
|
| Koushik Dutta Search vendor "Koushik Dutta" | Superuser Search vendor "Koushik Dutta" for product "Superuser" | 1.0.2.1 Search vendor "Koushik Dutta" for product "Superuser" and version "1.0.2.1" | - |
Affected
| in | Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 2.3.7 Search vendor "Google" for product "Android" and version "2.3.7" | - |
Safe
|
| Koushik Dutta Search vendor "Koushik Dutta" | Superuser Search vendor "Koushik Dutta" for product "Superuser" | 1.0.2.1 Search vendor "Koushik Dutta" for product "Superuser" and version "1.0.2.1" | - |
Affected
| in | Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 3.0 Search vendor "Google" for product "Android" and version "3.0" | - |
Safe
|
| Koushik Dutta Search vendor "Koushik Dutta" | Superuser Search vendor "Koushik Dutta" for product "Superuser" | 1.0.2.1 Search vendor "Koushik Dutta" for product "Superuser" and version "1.0.2.1" | - |
Affected
| in | Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 3.1 Search vendor "Google" for product "Android" and version "3.1" | - |
Safe
|
| Koushik Dutta Search vendor "Koushik Dutta" | Superuser Search vendor "Koushik Dutta" for product "Superuser" | 1.0.2.1 Search vendor "Koushik Dutta" for product "Superuser" and version "1.0.2.1" | - |
Affected
| in | Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 3.2 Search vendor "Google" for product "Android" and version "3.2" | - |
Safe
|
| Koushik Dutta Search vendor "Koushik Dutta" | Superuser Search vendor "Koushik Dutta" for product "Superuser" | 1.0.2.1 Search vendor "Koushik Dutta" for product "Superuser" and version "1.0.2.1" | - |
Affected
| in | Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 3.2.1 Search vendor "Google" for product "Android" and version "3.2.1" | - |
Safe
|
| Koushik Dutta Search vendor "Koushik Dutta" | Superuser Search vendor "Koushik Dutta" for product "Superuser" | 1.0.2.1 Search vendor "Koushik Dutta" for product "Superuser" and version "1.0.2.1" | - |
Affected
| in | Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 3.2.2 Search vendor "Google" for product "Android" and version "3.2.2" | - |
Safe
|
| Koushik Dutta Search vendor "Koushik Dutta" | Superuser Search vendor "Koushik Dutta" for product "Superuser" | 1.0.2.1 Search vendor "Koushik Dutta" for product "Superuser" and version "1.0.2.1" | - |
Affected
| in | Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 3.2.4 Search vendor "Google" for product "Android" and version "3.2.4" | - |
Safe
|
| Koushik Dutta Search vendor "Koushik Dutta" | Superuser Search vendor "Koushik Dutta" for product "Superuser" | 1.0.2.1 Search vendor "Koushik Dutta" for product "Superuser" and version "1.0.2.1" | - |
Affected
| in | Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 3.2.6 Search vendor "Google" for product "Android" and version "3.2.6" | - |
Safe
|
| Koushik Dutta Search vendor "Koushik Dutta" | Superuser Search vendor "Koushik Dutta" for product "Superuser" | 1.0.2.1 Search vendor "Koushik Dutta" for product "Superuser" and version "1.0.2.1" | - |
Affected
| in | Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 4.0 Search vendor "Google" for product "Android" and version "4.0" | - |
Safe
|
| Koushik Dutta Search vendor "Koushik Dutta" | Superuser Search vendor "Koushik Dutta" for product "Superuser" | 1.0.2.1 Search vendor "Koushik Dutta" for product "Superuser" and version "1.0.2.1" | - |
Affected
| in | Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 4.0.1 Search vendor "Google" for product "Android" and version "4.0.1" | - |
Safe
|
| Koushik Dutta Search vendor "Koushik Dutta" | Superuser Search vendor "Koushik Dutta" for product "Superuser" | 1.0.2.1 Search vendor "Koushik Dutta" for product "Superuser" and version "1.0.2.1" | - |
Affected
| in | Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 4.0.2 Search vendor "Google" for product "Android" and version "4.0.2" | - |
Safe
|
| Koushik Dutta Search vendor "Koushik Dutta" | Superuser Search vendor "Koushik Dutta" for product "Superuser" | 1.0.2.1 Search vendor "Koushik Dutta" for product "Superuser" and version "1.0.2.1" | - |
Affected
| in | Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 4.0.3 Search vendor "Google" for product "Android" and version "4.0.3" | - |
Safe
|
| Koushik Dutta Search vendor "Koushik Dutta" | Superuser Search vendor "Koushik Dutta" for product "Superuser" | 1.0.2.1 Search vendor "Koushik Dutta" for product "Superuser" and version "1.0.2.1" | - |
Affected
| in | Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 4.0.4 Search vendor "Google" for product "Android" and version "4.0.4" | - |
Safe
|
| Koushik Dutta Search vendor "Koushik Dutta" | Superuser Search vendor "Koushik Dutta" for product "Superuser" | 1.0.2.1 Search vendor "Koushik Dutta" for product "Superuser" and version "1.0.2.1" | - |
Affected
| in | Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 4.1 Search vendor "Google" for product "Android" and version "4.1" | - |
Safe
|
| Koushik Dutta Search vendor "Koushik Dutta" | Superuser Search vendor "Koushik Dutta" for product "Superuser" | 1.0.2.1 Search vendor "Koushik Dutta" for product "Superuser" and version "1.0.2.1" | - |
Affected
| in | Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 4.1.2 Search vendor "Google" for product "Android" and version "4.1.2" | - |
Safe
|
| Koushik Dutta Search vendor "Koushik Dutta" | Superuser Search vendor "Koushik Dutta" for product "Superuser" | 1.0.2.1 Search vendor "Koushik Dutta" for product "Superuser" and version "1.0.2.1" | - |
Affected
| in | Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 4.2 Search vendor "Google" for product "Android" and version "4.2" | - |
Safe
|
| Koushik Dutta Search vendor "Koushik Dutta" | Superuser Search vendor "Koushik Dutta" for product "Superuser" | 1.0.2.1 Search vendor "Koushik Dutta" for product "Superuser" and version "1.0.2.1" | - |
Affected
| in | Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 4.2.1 Search vendor "Google" for product "Android" and version "4.2.1" | - |
Safe
|
| Koushik Dutta Search vendor "Koushik Dutta" | Superuser Search vendor "Koushik Dutta" for product "Superuser" | 1.0.2.1 Search vendor "Koushik Dutta" for product "Superuser" and version "1.0.2.1" | - |
Affected
| in | Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 4.2.2 Search vendor "Google" for product "Android" and version "4.2.2" | - |
Safe
|