o·ver·whelm·ing
Adjective
| |
| Synonyms
|
Adjective
| |
| Synonyms
|
Perhaps not the easiest threat to remember, CVE-2013-2094 is a vulnerability that allows criminals to escalate privileges to a point where they can, effectively, achieve complete control of a device.
The threat exists on the Android platform due to the fact that Android was developed using Linux, and so many Linux vulnerabilities could potentially be exploited on Android.
The Linux vulnerability originally affected systems running on the 2.6 version of the Linux Kernel. In Android, Jelly Bean (version 4.2) uses version 3.0 of the Linux Kernel, although previous versions were built upon 2.6. This doesn't explicitly mean that Jelly Bean devices aren't at risk, but it does mean that tablets or smartphones using older versions of Android are more likely to be.
Unfortunately, for devices using older versions, any threat has little chance of going away without an update to resolve the issue. That's a problem if a device is continually out of date, but even more so if hardware receives no support or OS updates after release.
In regards to the exploit itself, the Symantec Connect Blog explains the seriousness of privilege escalation software: "Privilege escalation exploits are particularly dangerous as they can allow cybercriminals to gain complete control over the compromised device. The Android operating system normally sandboxes every application so they cannot perform sensitive system operations or interfere with other installed applications".
Adding to that and highlighting potential issues users might face, the blog states, "In the past, we have seen malware use privilege escalation exploits to access data from other applications, prevent uninstall, hide themselves, and also bypass the Android permissions model to enable behaviours such as sending premium SMS messages without user authorization."
Android users should take steps to avoid allowing malware using the CVE-2013-2094 vulnerability – or any other exploit – to gain access to devices. To protect yourself and reduce the risk to your Android or smartphone or tablet you can do the following…
Together, these three precautions will ensure that you minimise the risk as much as possible, while having help on hand to remove any malware which seeks to give itself free reign.
Read More: http://www.mobilesecurity.com/articles/551-linux-exploit-comes-to-android
#sudo apt-get install openjdk-6-jre
#AndroidDev PATH export PATH=${PATH}:/home/???/Documents/android-sdk-linux/tools export PATH=${PATH}:/home/???/Documents/android-sdk-linux/platform-tools
SUBSYSTEM=="usb", ATTRS{idVendor}=="0bb4", MODE="0666"
SUBSYSTEM=="usb", ATTRS{idVendor}=="0502", MODE="0666"
SUBSYSTEM=="usb", ATTRS{idVendor}=="12d1", MODE="0666"
SUBSYSTEM=="usb", ATTRS{idVendor}=="1004", MODE="0666"
SUBSYSTEM=="usb", ATTRS{idVendor}=="22b8", MODE="0666"
SUBSYSTEM=="usb", ATTRS{idVendor}=="04e8", MODE="0666"
SUBSYSTEM=="usb", ATTRS{idVendor}=="0fce", MODE="0666"
SUBSYSTEM=="usb", ATTRS{idVendor}=="0489", MODE="0666"
SUBSYSTEM=="usb", ATTRS{idVendor}=="18d1", SYMLINK+="android_adb", MODE="0666"
SUBSYSTEM=="usb", ATTRS{idVendor}=="04e8", MODE="0666", GROUP="plugdev"